c2pa-web vulnerabilities and fixes

Recent CVEs affecting c2pa-web, with upgrade or downgrade steps. 61 tracked.

Also searched as: c2pa web.

c2pa-web has 61 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 61. Most recent: 2026-10-13. Highest priority: CVE-2026-95634 (score 46/100).

• CVE-2026-34665 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Reso
• CVE-2026-34666 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-34667 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Underflow
• CVE-2026-34670 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-34672 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Underflow
• CVE-2026-34678 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Reso
• CVE-2026-34680 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Overflow
• CVE-2026-34688 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-34668 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-34669 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-34671 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Overflow
• CVE-2026-34673 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Reso
• CVE-2026-34677 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Reso
• CVE-2026-34679 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Va
• CVE-2026-95633 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that
• CVE-2026-103294 MEDIUM 5.9 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-100123 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-100118 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-100113 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100116 MEDIUM 5.9 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-100121 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-100135 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-48378 MEDIUM 5.3 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-95632 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that
• CVE-2026-48377 MEDIUM 5.3 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-95634 HIGH 8.6 UPGRADE UPGRADE CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in
• CVE-2026-100124 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100136 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an
• CVE-2026-100125 MEDIUM 5.9 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100120 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100117 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100115 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Securit
• CVE-2026-100119 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-100114 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Securit
• CVE-2026-100137 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-100122 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-102501 MEDIUM 5.3 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-104345 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-103297 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that
• CVE-2026-102502 MEDIUM 5.3 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that
• CVE-2026-100138 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-100139 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-103820 MEDIUM 5.5 UPGRADE UPGRADE CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Tr
• CVE-2026-105902 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-106627 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-103296 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that
• CVE-2026-71390 MEDIUM 4.0 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-71389 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could resu
• CVE-2026-48446 MEDIUM 5.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path T
• CVE-2026-48445 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an
• CVE-2026-48444 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an
• CVE-2026-48443 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-48442 HIGH 7.1 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path T
• CVE-2026-48439 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-48438 HIGH 7.5 UPGRADE UPGRADE CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an applic
• CVE-2026-48437 MEDIUM 5.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a
• CVE-2026-48436 MEDIUM 6.5 UPGRADE UPGRADE CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Secur
• CVE-2026-48435 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could resu
• CVE-2026-48434 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to a
• CVE-2026-48387 MEDIUM 6.2 UPGRADE UPGRADE CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an
• CVE-2026-47922 MEDIUM 4.7 UPGRADE UPGRADE CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in

FAQ

How do I fix c2pa-web vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is c2pa-web being exploited right now?

None of the tracked c2pa-web CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which c2pa-web CVE should I patch first?

CVE-2026-95634 currently ranks highest (46/100): CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in.

RSS feed for c2pa-web · ← Back to latest CVEs