Remote Code Execution vulnerability in Kedro ShelveStore
A remote code execution vulnerability (CVE-2024-9701) was identified in Kedro's ShelveStore component. The vulnerability was addressed by removing the ShelveStore functionality from the framework.
What happened
A remote code execution vulnerability was identified in the ShelveStore component of the Kedro framework. The vulnerability was addressed by removing the ShelveStore functionality entirely.
Governance controls
The ShelveStore was removed from the codebase as a breaking change to the API to address the security vulnerability.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.