C2
Product
C2pa-web
81
CVEs
0
On KEV
8.6
Max CVSS
32
New 30D
Severity mix
Critical 0High 36Medium 45Low 0
Watch
Add C2pa-web to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-95634 | 8.6 | Oct 13 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) Affected: before 0.15.3 |
| CVE-2026-48290 | 8.2 | Jul 14 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 0.7.0 |
| CVE-2026-100119 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-100114 | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) Affected: before 0.15.3 |
| CVE-2026-100136 | 7.5 | Oct 13 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: before 0.15.3 |
| CVE-2026-100139 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.15.3 |
| CVE-2026-104345 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-105902 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.15.3 |
| CVE-2026-103297 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.15.3 |
| CVE-2026-103296 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.15.3 |
| CVE-2026-100123 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.15.3 |
| CVE-2026-95633 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.15.3 |
| CVE-2026-100122 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.15.3 |
| CVE-2026-100121 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.15.3 |
| CVE-2026-100120 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-100115 | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) Affected: before 0.15.3 |
| CVE-2026-100137 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.15.3 |
| CVE-2026-100117 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-100135 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-100118 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.15.3 |
| CVE-2026-100113 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-100124 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.15.3 |
| CVE-2026-106627 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.15.3 |
| CVE-2026-95632 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.15.3 |
| CVE-2026-100138 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.15.3 |
| CVE-2026-48438 | 7.5 | Aug 11 | CAI Content Credentials | NULL Pointer Dereference (CWE-476) Affected: before 0.12.1 |
| CVE-2026-48439 | 7.5 | Aug 11 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.12.1 |
| CVE-2026-48295 | 7.5 | Jul 14 | CAI Content Credentials | Insufficiently Protected Credentials (CWE-522) Affected: through 0.7.0 |
| CVE-2026-48351 | 7.5 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.7.0 |
| CVE-2026-48352 | 7.5 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.7.0 |
| CVE-2026-34711 | 7.5 | Jun 9 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: through 0.7.1 |
| CVE-2026-34712 | 7.5 | Jun 9 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.7.1 |
| CVE-2026-34713 | 7.5 | Jun 9 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: through 0.7.1 |
| CVE-2026-34665 | 7.5 | May 12 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.7.1 |
| CVE-2026-48287 | 7.4 | Jul 14 | CAI Content Credentials | Untrusted Search Path (CWE-426) Affected: through 0.7.0 |
| CVE-2026-48442 | 7.1 | Aug 11 | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: before 0.12.1 |
| CVE-2026-48312 | 6.8 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.7.0 |
| CVE-2026-48436 | 6.5 | Aug 11 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.12.1 |
| CVE-2026-48434 | 6.2 | Aug 11 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.12.1 |
| CVE-2026-48443 | 6.2 | Aug 11 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.12.1 |
| CVE-2026-48445 | 6.2 | Aug 11 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: before 0.12.1 |
| CVE-2026-48387 | 6.2 | Aug 11 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: before 0.12.1 |
| CVE-2026-48444 | 6.2 | Aug 11 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: before 0.12.1 |
| CVE-2026-48435 | 6.2 | Aug 11 | CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: before 0.12.1 |
| CVE-2026-71389 | 6.2 | Aug 11 | CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: before 0.12.1 |
| CVE-2026-48357 | 6.2 | Jul 14 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: through 0.7.0 |
| CVE-2026-48296 | 6.2 | Jul 14 | CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: through 0.7.0 |
| CVE-2026-48302 | 6.2 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.7.0 |
| CVE-2026-48354 | 6.2 | Jul 14 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: through 0.7.0 |
| CVE-2026-48298 | 6.2 | Jul 14 | CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: through 0.7.0 |