Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:c2pa-web:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductC2Pa Web (951748a8-1e05-5688-9a6b-3611eb545b57)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34688 vulnerable 2026-06-08 07:59:13.033313 CAI Content Credentials | Improper Input Validation (CWE-20)
MEDIUM (6.2)
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-05-12T20:03:56.658Z
Updated: 2026-06-09T21:37:23.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34680 vulnerable 2026-06-08 07:59:12.875126 CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
MEDIUM (6.2)
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-05-12T20:03:55.669Z
Updated: 2026-06-09T21:36:35.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34679 vulnerable 2026-06-08 07:59:12.874850 CAI Content Credentials | Improper Input Validation (CWE-20)
MEDIUM (6.2)
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-05-12T20:03:50.133Z
Updated: 2026-06-09T21:37:52.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34678 vulnerable 2026-06-08 07:59:12.874353 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
MEDIUM (6.2)
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-05-12T20:03:57.503Z
Updated: 2026-06-09T21:38:02.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34677 vulnerable 2026-06-08 07:59:12.874054 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
MEDIUM (6.2)
CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Published: 2026-05-12T20:03:48.178Z
Updated: 2026-06-09T21:38:35.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34673 vulnerable 2026-06-08 07:59:12.868432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34672 vulnerable 2026-06-08 07:59:12.867890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34671 vulnerable 2026-06-08 07:59:12.867504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34670 vulnerable 2026-06-08 07:59:12.867052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34669 vulnerable 2026-06-08 07:59:12.866600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34668 vulnerable 2026-06-08 07:59:12.866107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34667 vulnerable 2026-06-08 07:59:12.865607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34666 vulnerable 2026-06-08 07:59:12.865047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34665 vulnerable 2026-06-08 07:59:12.864645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.