GHSA-qc22-xmq4-qg46

Source

https://github.com/advisories/GHSA-qc22-xmq4-qg46

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-qc22-xmq4-qg46/GHSA-qc22-xmq4-qg46.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-qc22-xmq4-qg46

Published

2026-04-01T20:47:06Z

Modified

2026-09-10T03:51:03Z

Severity

6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

c2cciutils affected by CVE-2022-40896

Details

Pinned vulnerable version of Pygment CVE-2022-40896

Database specific

{
    "cwe_ids":  [
        "CWE-434"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-04-01T20:47:06Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / c2cciutils

Package

Name: c2cciutils; View open source insights on deps.dev
Purl: pkg:pypi/c2cciutils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.67

Affected versions

1.*

1.0

1.1.dev20260322010408

1.1.dev20260325214400

1.1.dev20260325214646

1.1.dev20260326020353

1.1.dev20260329172511

1.1.dev20260401010459

1.1.dev20260408234250

1.1.dev20260422222154

1.1.dev20260425021339

1.1.dev20260430233123

1.1.dev20260505011637

1.1.dev20260506214007

1.1.dev20260507021839

1.1.dev20260509011208

1.1.dev20260511213707

1.1.dev20260519212443

1.1.dev20260520220833

1.1.dev20260608080955

1.1.dev20260611010041

1.1.dev20260613221901

1.1.dev20260619000044

1.1.dev20260701020311

1.1.dev20260713142334

1.1.dev20260715061316

1.1.dev20260715120157

1.1.dev20260715123251

1.1.dev20260715191641

1.1.dev20260715230936

1.1.dev20260722005220

1.1.dev20260723040650

1.1.dev20260724214442

1.1.dev20260725020002

1.1.dev20260801104100

1.1.dev20260802005455

1.1.dev20260804031727

1.1.dev20260807173435

1.1.dev20260827031911

1.1.dev20260901012257

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.1.10

1.1.11

1.1.12

1.1.16

1.1.17

1.1.18

1.1.19

1.1.20

1.1.21

1.1.22

1.1.23

1.1.24

1.1.25

1.1.26

1.1.27

1.1.28

1.1.29

1.1.30

1.1.31

1.1.32

1.1.33

1.1.34

1.1.35

1.1.36

1.1.37

1.1.38

1.1.39

1.1.40

1.1.41

1.1.42

1.1.43

1.1.44

1.1.45

1.1.46

1.1.47

1.1.48

1.1.49

1.1.50

1.1.51

1.1.55

1.1.56

1.1.57

1.1.58

1.1.59

1.1.60

1.1.61

1.1.62

1.1.63

1.1.64

1.1.65

1.1.66

Database specific

last_known_affected_version_range

"<= 1.1.66"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-qc22-xmq4-qg46/GHSA-qc22-xmq4-qg46.json"