Vulnerabilities for kedro

First version without a known vulnerability: 1.3.0

Details

• GHSA-9cqf-439c-j96r2026-04-03

  Kedro has Arbitrary Code Execution via Malicious Logging Configuration

  Fixed in: 1.3.0

• GHSA-6326-w46w-ppjw2026-04-03

  Kedro: Path Traversal in versioned dataset loading via unsanitized version string

  Fixed in: 1.3.0

• GHSA-747f-ww56-4q4h2025-03-20

  Kedro deserialization vulnerability

  Fixed in: 0.19.9

• GHSA-rm69-wvpv-r2w72025-03-20

  Kedro allows Remote Code Execution by Pulling Micro Packages