GHSA-wcjx-v2wj-xg87

Source

https://github.com/advisories/GHSA-wcjx-v2wj-xg87

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-wcjx-v2wj-xg87/GHSA-wcjx-v2wj-xg87.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wcjx-v2wj-xg87

Published

2026-03-26T22:27:12Z

Modified

2026-09-10T03:50:41Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)

Details

Pin vulnerable version of pyasn, see: See: https://github.com/advisories/GHSA-jr27-m4p2-rc6r

Database specific

{
    "cwe_ids":  [
        "CWE-1395",
        "CWE-674"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-03-26T22:27:12Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}

References

Affected packages

PyPI / c2cciutils

Package

Name: c2cciutils; View open source insights on deps.dev
Purl: pkg:pypi/c2cciutils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.66

Affected versions

1.*

1.0

1.1.dev20260322010408

1.1.dev20260325214400

1.1.dev20260325214646

1.1.dev20260326020353

1.1.dev20260329172511

1.1.dev20260401010459

1.1.dev20260408234250

1.1.dev20260422222154

1.1.dev20260425021339

1.1.dev20260430233123

1.1.dev20260505011637

1.1.dev20260506214007

1.1.dev20260507021839

1.1.dev20260509011208

1.1.dev20260511213707

1.1.dev20260519212443

1.1.dev20260520220833

1.1.dev20260608080955

1.1.dev20260611010041

1.1.dev20260613221901

1.1.dev20260619000044

1.1.dev20260701020311

1.1.dev20260713142334

1.1.dev20260715061316

1.1.dev20260715120157

1.1.dev20260715123251

1.1.dev20260715191641

1.1.dev20260715230936

1.1.dev20260722005220

1.1.dev20260723040650

1.1.dev20260724214442

1.1.dev20260725020002

1.1.dev20260801104100

1.1.dev20260802005455

1.1.dev20260804031727

1.1.dev20260807173435

1.1.dev20260827031911

1.1.dev20260901012257

1.1.0

1.1.1

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.1.10

1.1.11

1.1.12

1.1.16

1.1.17

1.1.18

1.1.19

1.1.20

1.1.21

1.1.22

1.1.23

1.1.24

1.1.25

1.1.26

1.1.27

1.1.28

1.1.29

1.1.30

1.1.31

1.1.32

1.1.33

1.1.34

1.1.35

1.1.36

1.1.37

1.1.38

1.1.39

1.1.40

1.1.41

1.1.42

1.1.43

1.1.44

1.1.45

1.1.46

1.1.47

1.1.48

1.1.49

1.1.50

1.1.51

1.1.55

1.1.56

1.1.57

1.1.58

1.1.59

1.1.60

1.1.61

1.1.62

1.1.63

1.1.64

1.1.65

Database specific

last_known_affected_version_range

"< 1.1.65"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-wcjx-v2wj-xg87/GHSA-wcjx-v2wj-xg87.json"