AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Kedro security advisories

4 advisories · 2 critical or high in 12 months · latest Apr 3

Repository

4 advisories

Critical 9.8Apr 3Kedro has Arbitrary Code Execution via Malicious Logging ConfigurationCVE-2026-35171fixed in 1.3.0High 7.1Apr 3Kedro: Path Traversal in versioned dataset loading via unsanitized version stringCVE-2026-35167fixed in 1.3.0Critical 9.8Mar 20, 2025Kedro deserialization vulnerabilityCVE-2024-9701fixed in 0.19.9High 8.8Mar 20, 2025Kedro allows Remote Code Execution by Pulling Micro PackagesCVE-2024-12215no fix yet
About Kedro

Reproducible data science pipelines (LF AI and Data).

Packages watched: kedro (PyPI).

kedro-org/kedro