CVE-2026-10142 | Dana Powers kafka-python up to 2.3.1 Protocol Parser receive_bytes memory allocation

June 11, 2026 Yanac

A vulnerability classified as problematic has been found in Dana Powers kafka-python up to 2.3.1. This impacts the function receive_bytes of the component Protocol Parser. The manipulation leads to uncontrolled memory allocation.

This vulnerability is listed as CVE-2026-10142. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More