c2cciutils (>=1.1.16, <=1.1.30), ddpw (2.0.0) +1 more potentially affected by CVE-2023-5752 via pip (22.0.3)

pip PYPI version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - c2cciutils =1.1.16, =0.4.2, =0.5.4 Source cves: CVE-2023-5752 Source advisory: OSV:PYSEC-2023-228...

c2cciutils (>=1.1.0, <=1.1.4), ddpw (2.0.0) +1 more potentially affected by CVE-2022-40897 via setuptools (60.7.1)

setuptools PYPI version 60.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c2cciutils =1.1.0, =0.3.9, =0.3.12 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...

c2cciutils (>=1.1.0, <=1.1.4), ddpw (2.0.0) +1 more potentially affected by CVE-2022-40897 via setuptools (60.7.1)

setuptools PYPI version 60.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - c2cciutils =1.1.0, =0.3.9, =0.3.12 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...