CyberSecBulletin

Dana Powers vulnerabilities

We track 2 vulnerabilities in Dana Powers products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Dana Powers vulnerabilities

  • 7.5 High severity

    kafka-python: Uncontrolled Resource Consumption

    CVE-2026-10143Dana Powers

    kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, Scra

  • 7.5 High severity

    kafka-python: Memory Allocation with Excessive Size Value

    CVE-2026-10142Dana Powers

    kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by sending a crafted 4-byte frame length value without bounds v