CVE-2026-10143 vulnerabilities

Vulnerabilities for packages: mlrun-fips, mlrun...

Linux Distros Unpatched Vulnerability : CVE-2026-10143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...

aiokafka (0.0.1) potentially affected by CVE-2026-10143 via kafka-python (1.0.1)

kafka-python PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - aiokafka 0.0.1 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

prometheus-kafka-consumer-group-exporter (0.3.1) potentially affected by CVE-2026-10143 via kafka-python (1.3.5)

kafka-python PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - prometheus-kafka-consumer-group-exporter 0.3.1 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

hs (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-10143 via kafka-python (1.4.1)

kafka-python PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - hs =0.0.3, =0.0.11 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

ctec-utils (>=0.3.8, <=1.3.0), dataverk (0.2.13) +14 more potentially affected by CVE-2026-10143 via kafka-python (1.4.6)

kafka-python PYPI version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - ctec-utils =0.3.8, =1.0.0, =13.0.0, =11.1.0, =1.0.1, =1.2.5, =1.3.0, =4.3.1, =0.2.1, =0.1.2a47, =0.0.1, =4.1.0, =4.6.0 -...

CVE-2026-10143

creationtimestamp| type| source ---|---|--- 2026-06-10 23:05:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxt5a2sss2h 2026-06-11 07:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnynq3sgq72i 2026-07-01 15:21:42+00:00| seen|...

ag-kafka-utils (>=0.1.0, <=0.1.2), ai-flow (0.3.1) +114 more potentially affected by CVE-2026-10143 via kafka-python (>=2.0.0, <=2.3.1)

kafka-python PYPI version =2.0.0, =0.1.0, =2022.9.19, =25.8.14, =3.2.0, =1.1.87, =2.8.0a0, =0.1.12, =0.1.4, =0.0.9, =0.0.3, =0.3.64, =0.3.124 and more Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...

prometheus-kafka-consumer-group-exporter (0.3.1) potentially affected by CVE-2026-10143 via kafka-python (1.3.5)

kafka-python PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - prometheus-kafka-consumer-group-exporter 0.3.1 Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...

ctec-utils (>=0.3.8, <=1.3.0), dataverk (0.2.13) +14 more potentially affected by CVE-2026-10143 via kafka-python (1.4.6)

kafka-python PYPI version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - ctec-utils =0.3.8, =1.0.0, =13.0.0, =11.1.0, =1.0.1, =1.2.5, =1.3.0, =4.3.1, =0.2.1, =0.1.2a47, =0.0.1, =4.1.0, =4.6.0 -...

hs (>=0.0.3, <=0.0.11) potentially affected by CVE-2026-10143 via kafka-python (1.4.1)

kafka-python PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - hs =0.0.3, =0.0.11 Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...

UBUNTU-CVE-2026-10143

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, ScramClient.processserverfirstmessage...

ag-kafka-utils (>=0.1.0, <=0.1.2), ai-flow (0.3.1) +110 more potentially affected by CVE-2026-10143 via kafka-python (>=2.0.0, <=2.2.15)

kafka-python PYPI version =2.0.0, =0.1.0, =2022.9.19, =25.8.14, =3.2.0, =1.1.87, =2.8.0a0, =0.1.12, =0.1.4, =0.0.9, =0.0.3, =0.3.64, =0.3.124 and more Source cves: CVE-2026-10143 Source advisory: SNYK:PYTHON-KAFKAPYTHON-17320566...