CVE-2026-47905: CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-47905?
The severity of CVE-2026-47905 is medium with a score of 6.2.
How do I fix CVE-2026-47905?
To fix CVE-2026-47905, update to a version of CAI Content Credentials later than c2pa-web@0.7.1 or c2pa-v0.80.1.
What types of applications are affected by CVE-2026-47905?
CVE-2026-47905 affects applications using CAI Content Credentials versions c2pa-web@0.7.1 and c2pa-v0.80.1 or earlier.
What is the potential impact of exploiting CVE-2026-47905?
Exploiting CVE-2026-47905 could lead to a denial-of-service condition by exhausting system resources.
What is the root cause of CVE-2026-47905?
CVE-2026-47905 is caused by uncontrolled resource consumption as outlined in CWE-400.