c2cciutils affected by CVE-2022-40896

published 2026-04-01 7mo ago modified 2026-09-10 2mo ago

cvss: —; not scored
cisa kev: Not listed; not in CISA's catalog
epss: —; no score, EPSS covers CVEs only
public exploits: 0; none known

Pinned vulnerable version of Pygment [CVE-2022-40896](https://nvd.nist.gov/vuln/detail/CVE-2022-40896)

Patch / fix

fixed in 1 links 1

pypi c2cciutils 1.1.67

github.com/camptocamp/c2cciutils@9d54eab commit

Is GHSA-qc22-xmq4-qg46 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Affected packages

ecosystem	package	affected	fixed in
pypi	c2cciutils	<1.1.67	1.1.67

Classification

Weakness

CWE-434 Unrestricted Upload of File with Dangerous Type

References

Sources

GitHub Advisory GHSA-qc22-xmq4-qg46

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.