Skip to content
OpenAdvisories

Product · kedro-org

kedro

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-35167

    Kedro has a path traversal in versioned dataset loading via unsanitized version string

    Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are us…

    kedro-org kedro kedro PyPI