kedro-datasets
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting kedro-datasetspage 1 of 1
- CVE-2026-111170MEDIUMCVSS 6.5EG 6.5fixed in 9.3.02026-10-15
vulnerable: 0.0.1 ... 9.2.0 (41 versions)
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() st…
- CVE-2026-35492MEDIUMCVSS 6.5EG 6.5fixed in 9.3.02026-04-07
vulnerable: 0.0.1 ... 9.2.0 (41 versions)
Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An a…
Check whether kedro-datasets is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for kedro-datasets CVEs against the assets you own.
Book a Demo →