Kedro security advisories
4 advisories · 2 critical or high in 12 months · latest Apr 3
4 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Apr 3 | Kedro has Arbitrary Code Execution via Malicious Logging Configuration CVE-2026-35171Critical9.8fixed in 1.3.0 | Critical9.8 | 1.3.0 |
| Apr 3 | Kedro: Path Traversal in versioned dataset loading via unsanitized version string CVE-2026-35167High7.1fixed in 1.3.0 | High7.1 | 1.3.0 |
| Mar 202025 | Kedro deserialization vulnerability CVE-2024-9701Critical9.8fixed in 0.19.9 | Critical9.8 | 0.19.9 |
| Mar 202025 | Kedro allows Remote Code Execution by Pulling Micro Packages CVE-2024-12215High8.8no fix yet | High8.8 | No fix yet |