Vulnerabilidades de Dana Powers kafka-python (CVE)

Registros CVE publicados para Dana Powers kafka-python, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-10143 hace 5 meses

kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py

Dana Powers kafka-python; Red Hat Red Hat Quay 3.10; Red Hat Red Hat Quay 3.12; Red Hat Red Hat Quay 3.15

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, Scr…

7.5Alta

CVE-2026-10142 hace 5 meses

kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length

Dana Powers kafka-python

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds …