Skip to content
OpenAdvisories

Vendor

kedro-org

8 known vulnerabilities.

Products

kedro-org/kedro 3 kedro-plugins 2 kedro 2 kedro-datasets 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-35492 Public exploit

    Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

    Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious…

    kedro-org kedro-plugins