-
Notifications
You must be signed in to change notification settings - Fork 178
Pull requests: contentauth/c2pa-rs
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: Complete OCSP responder certificate path from signer x5chain (backport #2468)
#2472
opened Aug 11, 2026 by
caiopensrc
Collaborator
Loading…
fix: Reject BMFF update manifest without a paired original manifest
backport-stable
Cherry-pick this merged main PR onto the stable release line
#2471
opened Aug 11, 2026 by
ssanthosh
Contributor
Loading…
3 tasks
chore: release
release
release-plz release PR; runs the full Tier 1A+1B+2 suite
#2470
opened Aug 11, 2026 by
caiopensrc
Collaborator
Loading…
fix(sdk): Prevent panic on out-of-range timestamp in GeneralizedTime conversion
backport-stable
Cherry-pick this merged main PR onto the stable release line
#2469
opened Aug 11, 2026 by
mpgopala
Contributor
Loading…
fix: Avoid QoS runtime detection warning
check-release
Force the full Tier 1A+1B+2 suite on this PR
#2467
opened Aug 11, 2026 by
tmathern
Contributor
Loading…
3 tasks done
fix: Preserve identity assertions in split-signing paths (backport #2421)
upstream-first-verified
Attests an adapted cherry-pick is already on main (exempts the upstream-first check)
#2465
opened Aug 10, 2026 by
scouten-adobe
Collaborator
Loading…
4 tasks done
fix: Harden against arbitrary file write via manifest resource path traversal in Reader::to_folder
#2462
opened Aug 10, 2026 by
ssanthosh
Contributor
Loading…
3 tasks
fix: Propagate created flag to metadata assertions
backport-stable
Cherry-pick this merged main PR onto the stable release line
check-release
Force the full Tier 1A+1B+2 suite on this PR
#2459
opened Aug 10, 2026 by
tmathern
Contributor
Loading…
3 tasks done
update: bump sha1 from 0.10.7 to 0.11.0
check-release
Force the full Tier 1A+1B+2 suite on this PR
dependencies
Pull requests that update a dependency file
rust
Pull requests that update rust code
#2456
opened Aug 10, 2026 by
dependabot
Bot
Loading…
fix(sdk): Validate inputTo ingredients against manifest tampering
#2455
opened Aug 10, 2026 by
mpgopala
Contributor
Loading…
4 tasks done
fix: Harden against local_id truncation issue in accessing BMFF merkle maps
#2454
opened Aug 9, 2026 by
ssanthosh
Contributor
Loading…
3 tasks
fix: Harden against unbounded memory allocation attack in JPEG XL parser
#2453
opened Aug 9, 2026 by
ssanthosh
Contributor
Loading…
3 tasks
feat(sdk): Add jumbf_io::remove_jumbf_from_stream
#2452
opened Aug 7, 2026 by
stupside
Contributor
Loading…
3 tasks done
fix(sdk): Avoid u32 truncation when hashing ranges of 4 GiB or more
#2448
opened Aug 7, 2026 by
stupside
Contributor
Loading…
3 tasks done
feat: add digital source type field to ingredient
#2447
opened Aug 7, 2026 by
ok-nick
Contributor
Loading…
feat: add related assertions field and validation to c2pa.actions
#2446
opened Aug 7, 2026 by
ok-nick
Contributor
Loading…
fix: Reject BMFF Merkle map location that overflows u32 chunk index (CAI-12884)
#2445
opened Aug 7, 2026 by
scouten-adobe
Collaborator
Loading…
4 tasks done
chore: Add regression coverage for CAI-12939 / VULN-36963 crafted-ilst underflow
backport-stable
Cherry-pick this merged main PR onto the stable release line
#2443
opened Aug 7, 2026 by
scouten-adobe
Collaborator
Loading…
3 tasks done
test: update trust anchor examples/fixtures for anchors array (#2388)
#2436
opened Aug 6, 2026 by
crandmck
Collaborator
Loading…
2 of 3 tasks
docs: document --trust_list_uri and init trust subcommand
#2435
opened Aug 6, 2026 by
crandmck
Collaborator
Loading…
2 tasks
fix(sdk)!: Block redirect SSRF via per-hop validation; add allow_redirects (CAI-12574)
#2433
opened Aug 6, 2026 by
scouten-adobe
Collaborator
Loading…
fix: remove Cherry-pick this merged main PR onto the stable release line
validationResults requires activeManifest when serializing v3 ingredients
backport-stable
#2429
opened Aug 6, 2026 by
ok-nick
Contributor
Loading…
fix: Allow dc:created and dc:modified in c2pa.metadata (CAI-13221)
backport-stable
Cherry-pick this merged main PR onto the stable release line
#2425
opened Aug 5, 2026 by
scouten-adobe
Collaborator
Loading…
ci: Reinstate the
safe to test label in version-controlled labels (backport #2422)
#2423
opened Aug 5, 2026 by
caiopensrc
Collaborator
Loading…
ci: Replace
safe to test trust logic with GitHub native fork-approval
#2420
opened Aug 5, 2026 by
scouten-adobe
Collaborator
Loading…
Previous Next
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.