Vulnerabilities

TI-2026-26955 CVE-2026-34711 · GHSA-47r4-q5f4-x2qv

CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)

LOW 33

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0043 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-190

TI-2026-26956 CVE-2026-34712 · GHSA-jxcp-8jh9-825w

CAI Content Credentials | Improper Input Validation (CWE-20)

LOW 39

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-20

TI-2026-35352 CVE-2026-47904 · GHSA-vr3p-xmf5-v63x

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

LOW 27

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00153 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-400

TI-2026-35351 CVE-2026-47903 · GHSA-qx3w-6mjj-cvrc

CAI Content Credentials | Improper Input Validation (CWE-20)

LOW 27

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00153 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-20

TI-2026-35350 CVE-2026-47902 · GHSA-89fj-wmjh-6xfj

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

LOW 27

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00153 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-400

TI-2026-35353 CVE-2026-47905 · GHSA-jp5j-q2jw-fhpf

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

LOW 27

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00153 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-400

TI-2026-26901 CVE-2026-34657 · GHSA-hvmh-vjjx-rw3h

CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

LOW 24

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00178 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-22

TI-2026-26957 CVE-2026-34713 · GHSA-x2pp-hg54-xgcf

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

LOW 39

CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00407 Published 2026-06-09 Fixed in c2pa-v0.85.1, @contentauth/[email protected] CWE-400

Vulnerabilities

Filters