Threat Intelligence Database

kedro-datasets versions 9.3.0 through 9.6.0 contain a path traversal vulnerability in the MatplotlibDataset.save() function. This flaw allows attackers with limited privileges to write files outside the intended dataset directory by providing absolute plot names. The vulnerability arises because validate_sub_path() removes leading slashes, but pathlib's join discards the base path when joining with absolute paths, enabling arbitrary file creation or overwriting where the process has write permissions.

Kedro-Datasets versions from 5.0.0 up to but not including 9.5.0 contain a deserialization vulnerability in the experimental PyTorchDataset component. This component loads .pt model files using torch.load without enforcing the weights_only=True parameter, allowing maliciously crafted pickle-backed models to execute arbitrary code on PyTorch versions earlier than 2.6. The vulnerability only affects users who load untrusted model files via this opt-in component. The issue is resolved in version 9.5.0.