c2cciutils affected by CVE-2022-40896

🗓️ 01 Apr 2026 20:47:06Reported by GitHub Advisory DatabaseType

C2cciutils is affected by CVE-2022-40896 due to pinned vulnerable Pygment version.

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	20 Mar 202517:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cinder plug-in is affected by a vulnerability in the Python Pygments-2.14.0 package [CVE-2022-40896]	4 Dec 202310:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.4 addresses multiple security vulnerabilities	15 Apr 202502:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses Pygments-2.14.0-py3-none-any.whl which is vulnerable to CVE-2022-40896	19 Dec 202317:20	–	ibm
ATTACKERKB	CVE-2022-40896	19 Jul 202315:15	–	attackerkb
AstraLinux	Astra Linux - уязвимость в pygments	31 Oct 202516:38	–	astralinux
CBLMariner	CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1	21 Oct 202220:42	–	cbl_mariner
CBLMariner	CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1	24 Jul 202400:12	–	cbl_mariner
Circl	CVE-2022-40896	19 Jul 202318:21	–	circl
CNNVD	Matthäus G. Chajdas pygments 代码问题漏洞	19 Jul 202300:00	–	cnnvd

Vulners

Node

c2cciutilsRange≤1.1.66pip

Source	Link
github	www.github.com/camptocamp/c2cciutils/security/advisories/GHSA-qc22-xmq4-qg46
github	www.github.com/camptocamp/c2cciutils/commit/9d54eab73fcf24d492b339137040400da7ef4076
github	www.github.com/advisories/GHSA-mrwq-x4v8-fh7p
github	www.github.com/advisories/GHSA-qc22-xmq4-qg46

01 Apr 2026 20:47Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00069

SSVC