C2
Product
C2pa
94
CVEs
0
On KEV
8.6
Max CVSS
32
New 30D
Severity mix
Critical 0High 41Medium 53Low 0
Watch
Add C2pa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-95634 | 8.6 | Oct 13 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) Affected: before 0.91.1 |
| CVE-2026-48290 | 8.2 | Jul 14 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) Affected: through 0.84.0 |
| CVE-2026-100119 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-100114 | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) Affected: before 0.91.1 |
| CVE-2026-100136 | 7.5 | Oct 13 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: before 0.91.1 |
| CVE-2026-100139 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.91.1 |
| CVE-2026-104345 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-105902 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.91.1 |
| CVE-2026-103297 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.91.1 |
| CVE-2026-103296 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.91.1 |
| CVE-2026-100123 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.91.1 |
| CVE-2026-95633 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.91.1 |
| CVE-2026-100122 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.91.1 |
| CVE-2026-100121 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.91.1 |
| CVE-2026-100120 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-100115 | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) Affected: before 0.91.1 |
| CVE-2026-100137 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.91.1 |
| CVE-2026-100117 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-100135 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-100118 | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) Affected: before 0.91.1 |
| CVE-2026-100113 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-100124 | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: before 0.91.1 |
| CVE-2026-106627 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.91.1 |
| CVE-2026-95632 | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) Affected: before 0.91.1 |
| CVE-2026-100138 | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.91.1 |
| CVE-2026-75632 | 7.5 | Sep 22 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: through 0.89.2 |
| CVE-2026-19480 | 7.5 | Sep 22 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.89.2 |
| CVE-2026-71443 | 7.5 | Aug 25 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.89.0 |
| CVE-2026-71442 | 7.5 | Aug 25 | CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: through 0.89.0 |
| CVE-2026-71360 | 7.5 | Aug 25 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: through 0.89.0 |
| CVE-2026-48438 | 7.5 | Aug 11 | CAI Content Credentials | NULL Pointer Dereference (CWE-476) Affected: before 0.90.6 |
| CVE-2026-48439 | 7.5 | Aug 11 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.90.6 |
| CVE-2026-48295 | 7.5 | Jul 14 | CAI Content Credentials | Insufficiently Protected Credentials (CWE-522) Affected: through 0.84.0 |
| CVE-2026-48351 | 7.5 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.84.0 |
| CVE-2026-48352 | 7.5 | Jul 14 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.84.0 |
| CVE-2026-34711 | 7.5 | Jun 9 | CAI Content Credentials | Integer Overflow or Wraparound (CWE-190) Affected: through 0.80.1 |
| CVE-2026-34712 | 7.5 | Jun 9 | CAI Content Credentials | Improper Input Validation (CWE-20) Affected: through 0.80.1 |
| CVE-2026-34713 | 7.5 | Jun 9 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: through 0.80.1 |
| CVE-2026-34665 | 7.5 | May 12 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) Affected: before 0.80.1 |
| CVE-2026-48287 | 7.4 | Jul 14 | CAI Content Credentials | Untrusted Search Path (CWE-426) Affected: through 0.84.0 |
| CVE-2026-48442 | 7.1 | Aug 11 | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: before 0.90.6 |
Showing 41