GHSA-wcjx-v2wj-xg87: C2C CI utils is vulnerable to DoS via pyasn dependency (CVE-2026-30922)

March 26, 2026

Pin vulnerable version of pyasn, see: See: https://github.com/advisories/GHSA-jr27-m4p2-rc6r

References

github.com/advisories/GHSA-wcjx-v2wj-xg87
github.com/camptocamp/c2cciutils
github.com/camptocamp/c2cciutils/commit/1ab415014817d7d1cf09ad56cc8a7dec2a1108d8
github.com/camptocamp/c2cciutils/security/advisories/GHSA-wcjx-v2wj-xg87

Code Behaviors & Features

Detect and mitigate GHSA-wcjx-v2wj-xg87 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →