PatchTheCVEkafka-python vulnerabilities and fixes
Recent CVEs affecting kafka-python, with upgrade or downgrade steps. 2 tracked.
Also searched as: kafka python.
kafka-python has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-06-10. Highest priority: CVE-2026-10143 (score 42/100).
- CVE-2026-10143 HIGH 7.5 UPGRADE kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that a
- CVE-2026-10142 HIGH 7.5 UPGRADE kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a ma
FAQ
How do I fix kafka-python vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kafka-python being exploited right now?
None of the tracked kafka-python CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kafka-python CVE should I patch first?
CVE-2026-10143 currently ranks highest (42/100): kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that a.