Priority MEDIUM 40
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-522
Priority LOW 37
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 8.2· Local · No auth · User interaction · EPSS 0.00295 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-918
Priority LOW 27
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-400
Priority LOW 27
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-191
Priority LOW 34
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user.
CVSS 3.1HIGH 7.4· Local · No auth · User interaction · EPSS 0.00225 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-426
Priority LOW 30
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 6.8· Local · No auth · No interaction · EPSS 0.00282 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
Priority MEDIUM 41
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00927 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
Priority LOW 27
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00267 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
Priority LOW 27
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00289 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-190
Priority LOW 27
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00259 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-191
Priority MEDIUM 41
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00927 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
Priority LOW 24
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00263 · Published 2026-07-14 · Fixed in c2pa-v0.85.2, c2patool-v0.26.65 +1 CWE-20
THREATIST.IORead the docs