CVE-2026-34713: CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-34713?
The severity of CVE-2026-34713 is high with a CVSS score of 7.5.
What is the impact of CVE-2026-34713?
CVE-2026-34713 can lead to an application denial-of-service condition due to uncontrolled resource consumption.
How do I fix CVE-2026-34713?
To fix CVE-2026-34713, upgrade to version c2pa-web@0.7.2 or c2pa-v@0.80.2 or later.
Which versions are affected by CVE-2026-34713?
CVE-2026-34713 affects CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v@0.80.1 and earlier.
What type of vulnerability is CVE-2026-34713 classified as?
CVE-2026-34713 is classified as an Uncontrolled Resource Consumption vulnerability (CWE-400).