CVE-2026-10143

The flaw

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration coun

What to do

Review advisory and patch per vendor guidance.

References