camptocamp/c2cciutils · Security
C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)
- GHSA ID
- GHSA-wcjx-v2wj-xg87
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Pin vulnerable version of pyasn, see: See: https://github.com/advisories/GHSA-jr27-m4p2-rc6r
CWEs
- CWE-674 · Uncontrolled Recursion
- CWE-1395 · Dependency on Vulnerable Third-Party Component