Adobe Security Bulletin
Last updated on May 12, 2026
Security updates available for Content Authenticity SDK | APSB26-53
Bulletin ID
Date published
Priority
APSB26-53
May 12, 2026
3
Affected versions
Product
Affected version
Platform
Content Authenticity JS SDK
@contentauth/c2pa-web@0.7.0
Windows, macOS, Linux, iOS, Android
Content Authenticity Rust SDK
c2pa-v0.78.2
Windows, macOS, Linux, iOS, Android
Solution
Adobe categorizes these updates with the following priority rating and recommends users update their installation to the newest version:
Product
Updated version
Platform
Priority rating
Availability
Content Authenticity JS SDK
@contentauth/c2pa-web@0.7.1
Windows, macOS, Linux, iOS, Android
3
Vulnerability Details
Acknowledgments
Adobe would like to thank the following researchers for reporting this issue and for working with Adobe to help protect our customers.
- bau1u - CVE-2026-34665, CVE-2026-34666, CVE-2026-34667, CVE-2026-34668, CVE-2026-34669, CVE-2026-34670, CVE-2026-34671, CVE-2026-34672, CVE-2026-34673, CVE-2026-34677, CVE-2026-34678, CVE-2026-34679, CVE-2026-34680, CVE-2026-34688
NOTE: Adobe has a public bug bounty program with Intigriti. If you are interested in working with Adobe as an external security researcher, please check us out here: https://app.intigriti.com/programs/adobe/adobepublic/detail.
For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com