Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

kedro-datasets

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
10.0.0 (Nov 3, 2026): no advisory affects it
Newest unaffected release
10.0.0 (Nov 3, 2026), the latest release
Advisories
2 · 1 high, 1 medium
Weekly downloads
283.6K
Dependents
13
Releases
46 since 0.0.1 (Jun 22, 2022)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name

    Affected: fixed in 9.3.0.

    Fixed in 9.3.0 (released Apr 2, 2026, 196 days before disclosure).

    The latest release, 10.0.0, is not affected.

  • CVE-2026-35492Medium 6.5

    Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

    Affected: fixed in 9.3.0.

    Fixed in 9.3.0 (released Apr 2, 2026, 5 days before disclosure).

    The latest release, 10.0.0, is not affected.