kedro-org has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.1 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.1
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-62997High· 7.7Kedro-Datasets provides data connectors for Kedro42CVE-2026-111170Medium· 6.5kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names36
kedro-org vulnerabilities
CVEs affecting kedro-org, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-111170Medium· 6.5kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() …
▾ Sunlitkedro-org · kedro-datasetsEPSS 0.39%via NVD
CVE-2026-62997High· 7.7Kedro-Datasets provides data connectors for Kedro
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-s…
▾ Twilightkedro-org · kedro-pluginsEPSS 0.69%via NVD