CVE-2026-100137
CVE-2026-100137 · CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVSS 7.5 · High · EPSS 0.5%
- Published
- Updated
Affected products and versions
content credentials rust sdk
- Versions
- ≥ 0, ≤ c2pa-v0.90.15: Affected (custom)
- c2pa-v0.91.1: Not affected (custom)
No fix published
c2pa tool
- Versions
- ≥ 0, ≤ c2patool-v0.27.15: Affected (custom)
- v0.28.1: Not affected (custom)
No fix published
content credentials js sdk
- Versions
- ≥ 0, ≤ @contentauth/[email protected]: Affected (custom)
- @contentauth/[email protected]: Not affected (custom)
No fix published