Priority LOW 27
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-400
Priority LOW 27
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-400
Priority LOW 22
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00561 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-918
Priority LOW 18
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.0027 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-20
Priority LOW 31
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read.
CVSS 3.1HIGH 7.1· Local · No auth · No interaction · EPSS 0.003 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-22
Priority LOW 27
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00289 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-190
Priority LOW 27
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00289 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-190
Priority LOW 30
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00718 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-20
Priority MEDIUM 41
CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00902 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-476
Priority LOW 25
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00293 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-22
Priority LOW 27
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00289 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-190
Priority LOW 27
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-191
Priority MEDIUM 41
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00902 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-400
Priority LOW 24
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00154 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-295
Priority LOW 27
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-08-11 · Fixed in c2pa-v0.90.6, c2patool-v0.27.6 +1 CWE-191
THREATIST.IORead the docs