Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority MEDIUM 41

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00902 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-400
Priority LOW 21

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00588 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20
Priority LOW 24

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0024 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20
Priority MEDIUM 40

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00786 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20
Priority LOW 24

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00251 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-190
Priority LOW 30

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00718 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20
Priority LOW 21

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00588 Published 2026-09-22 Fixed in c2pa-v0.90.17, c2patool-v0.27.17 CWE-20