monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10143 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10143 Source advisory: OSV:GHSA-2JCM-HQ8R-84WX...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10142 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10142 Source advisory: OSV:GHSA-M3PX-Q5GJ-J9X7...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10143 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10143 Source advisory: OSV:PYSEC-2026-2191...

monasca-notification (>=1.2.0, <=1.2.7), monasca-persister (0.1.12) potentially affected by CVE-2026-10142 via kafka-python (0.9.2)

kafka-python PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on kafka-python and may be impacted: - monasca-notification =1.2.0, =1.2.7 - monasca-persister 0.1.12 Source cves: CVE-2026-10142 Source advisory: OSV:PYSEC-2026-2190...