CVE-2026-111170

The kedro-datasets library (versions 9.3.0 through 9.6.0) is vulnerable to a path traversal vulnerability within the MatplotlibDataset.save() function. An attacker can supply absolute plot names to write files outside the intended dataset directory. The root cause occurs because validate_sub_path...