Priority LOW 39
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00494 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority LOW 30
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00404 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority LOW 39
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-284
Priority MEDIUM 40
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00568 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-190
Priority LOW 26
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00199 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority MEDIUM 40
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00541 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
Priority LOW 39
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00494 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority MEDIUM 40
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00541 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
Priority LOW 39
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
Priority LOW 39
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
Priority LOW 26
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00259 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority LOW 39
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00293 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority LOW 30
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00326 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority LOW 39
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00334 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
Priority LOW 39
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00293 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority LOW 30
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00373 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-347
Priority LOW 39
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00293 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority LOW 39
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00494 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority MEDIUM 46
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00519 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-918
Priority LOW 39
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-284
Priority MEDIUM 40
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00541 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-400
Priority MEDIUM 40
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00608 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority MEDIUM 40
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00608 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Priority LOW 39
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-295
Priority MEDIUM 40
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00608 · Published 2026-10-13 · Fixed in c2pa-v0.91.1, v0.28.1 +1 CWE-20
Load more
THREATIST.IORead the docs