PyPI/kedro CVE-2024-12215: high 8.8, EPSS 1.08%
Kedro allows Remote Code Execution by Pulling Micro Packages
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.19.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1485
- https://nvd.nist.gov/vuln/detail/CVE-2024-12215
- https://github.com/kedro-org/kedro
- https://huntr.com/bounties/fad27503-97a4-4933-91d4-96223b8c54d8
- https://pypi.org/project/kedro
- https://github.com/advisories/GHSA-rm69-wvpv-r2w7
CVE-2024-12215 · published · modified · JSON