GitHub Advisoryadvisory · PyPI

GHSA-wcjx-v2wj-xg87 C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)

HIGH Published 2026-03-26 Modified 2026-03-26 Official page ↗

Ecosystem: PyPI
Packages: c2cciutils
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-1395, CWE-674
Reviewed: 2026-03-26

Affected packages

• PyPI c2cciutils: < 1.1.66 → fixed in 1.1.66

Description

Pin vulnerable version of pyasn, see: See: https://github.com/advisories/GHSA-jr27-m4p2-rc6r

Related

Weakness · CWE (2)

CWE-1395 Dependency on Vulnerable Third-Party Component weakness
CWE-674 Uncontrolled Recursion weakness

References