CVE-2026-10142

The flaw

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length va

What to do

Review advisory and patch per vendor guidance.

References