PyPI/kedro CVE-2024-9701: critical 9.8, EPSS 1.14%

Kedro deserialization vulnerability

Action: Upgrade kedro to 0.19.9 or later.

pip install kedro==0.19.9

Affected

Fixed versions

Sources

• osv: GHSA-747f-ww56-4q4h
• https://nvd.nist.gov/vuln/detail/CVE-2024-9701
• https://github.com/kedro-org/kedro/commit/66e5e074b2789469550370f370c8b486f638d975
• https://github.com/kedro-org/kedro
• https://github.com/pypa/advisory-database/tree/main/vulns/kedro/PYSEC-2026-367.yaml
• https://huntr.com/bounties/96c77fef-93b2-4d4d-8cbe-57a718d8eea5

CVE-2024-9701 · published 2025-03-20T12:32:51Z · modified 2026-07-06T15:30:15.808816534Z · JSON