StackRadar

CVE-2026-10142

High

Advisory

Published 10 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
15
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 15 images.

Affected packageAffected versionsFixed inImages
kafka-pythonpypi1.3.5, 1.4.7, 2.0.0, 2.0.22.3.215
OSV records
PYSEC-2026-2190
Also known as
GHSA-m3px-q5gj-j9x7

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
kafka-python@2.0.2
2.3.2

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
kafka-python@2.0.2
2.3.2

Open the chart page →

6,041
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
kafka-python@2.0.2
2.3.2
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
kafka-python@2.0.2
2.3.2

Open the chart page →

17,877
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
kafka-python@2.0.0
2.3.2

Open the chart page →

4,568
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
kafka-python@2.0.2
2.3.2

Open the chart page →

6,179
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
kafka-python@2.0.2
2.3.2

Open the chart page →

18,066
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
kafka-python@2.0.2
2.3.2

Open the chart page →

6,447
kafka-aggregatorlsst-sqre0.1.21 of 1See more

kafka-aggregator lsst-sqre 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
lsstsqre/kafkaaggregator:masterbe1b21060854
kafka-python@1.4.7
2.3.2

Open the chart page →

3,052
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
kafka-python@2.0.2
2.3.2

Open the chart page →

5,456
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
kafka-python@1.3.5
2.3.2

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2026-10142.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
kafka-python@1.3.5
2.3.2
voltha/voltha-netconf:1.6.037f80524c207
kafka-python@1.3.5
2.3.2
voltha/voltha-ofagent:1.6.09ee8c1f4428c
kafka-python@1.3.5
2.3.2
voltha/voltha-voltha:1.6.0ff596b62de59
kafka-python@1.3.5
2.3.2

Open the chart page →

93,855

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
kafka-python@2.0.2
2.3.2
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
kafka-python@2.0.2
2.3.2
1
datadog/agent:7.22.08f20e56b5311
kafka-python@2.0.0
2.3.2
1
evk02/mlflow:2.2.1ef6ff257ef35
kafka-python@2.0.2
2.3.2
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
kafka-python@2.0.2
2.3.2
1
homeassistant/home-assistant:2023.12.48d000332b09b
kafka-python@2.0.2
2.3.2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
kafka-python@2.0.2
2.3.2
1
lsstsqre/kafkaaggregator:masterbe1b21060854
kafka-python@1.4.7
2.3.2
1
voltha/voltha-cli:1.6.0c4e41e92f046
kafka-python@1.3.5
2.3.2
1
voltha/voltha-netconf:1.6.037f80524c207
kafka-python@1.3.5
2.3.2
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
kafka-python@1.3.5
2.3.2
1
voltha/voltha-tester:1.7.0655c3048a602
kafka-python@1.3.5
2.3.2
1
voltha/voltha-voltha:1.6.0ff596b62de59
kafka-python@1.3.5
2.3.2
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
kafka-python@2.0.2
2.3.2
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
kafka-python@2.0.2
2.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.