Skip to content
OpenAdvisories

Vendor

kedro-org

8 known vulnerabilities.

Products

kedro-org/kedro 3 kedro-plugins 2 kedro 2 kedro-datasets 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111170

    kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name

    kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes…

    kedro-org kedro-datasets kedro-datasets PyPI
  • Medium 6.5
    CVE-2026-35492 Public exploit

    Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

    Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious…

    kedro-org kedro-plugins