Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/03 3:46 a.m.9 views

Kedro: Path Traversal in versioned dataset loading via unsanitized version string

Impact The getversionedpath method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are used as path components, traversal sequences such as ../ are preserved and can escape the intended versioned...

8.1CVSS5.9AI score0.00327EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder