09 June 2026

Fixed

• DLL hijacking vulnerability in c2patool (CAI-8608) (#2031)

08 June 2026

04 June 2026

08 June 2026

Added

• CrJson binding on Reader in C FFI (#2212)

04 June 2026

Fixed

• [breaking] Remove unused Error variant types (#2195)

08 June 2026

Fixed

• NOOP PR for release-plz trigger (#2215)

What's Changed

• feat: crJson binding on Reader in C FFI by @tmathern in #2212
• fix: NOOP PR for release-plz trigger by @tmathern in #2215
• chore: release by @caiopensrc in #2214

Full Changelog: c2patool-v0.26.63...c2pa-v0.86.1

04 June 2026

Fixed

• [breaking] Remove unused Error variant types (#2195)
• Harden additional JUMBF parser sites against integer underflow (#2201)

What's Changed

• fix: Harden additional JUMBF parser sites against integer underflow by @ak-singh in #2201
• fix!: Remove unused Error variant types by @scouten-adobe in #2195
• chore: release by @caiopensrc in #2205

Full Changelog: c2patool-v0.26.62...c2pa-v0.86.0

03 June 2026

03 June 2026

Fixed

• Error with validation results on invalid manifest after verify after sign (#2147)

03 June 2026

Fixed

• Exact ingredient redaction URI matching (#2203)
• Harden against integer underflow in JUMBF box parsers (#2200)
• Dup redaction (#2199)
• Harden against unchecked array index in JUMBF brotli box accessor (#2192)
• Make GIF box map C2PA placeholder len 0 rather than 1 (#2156)
• Error with validation results on invalid manifest after verify after sign (#2147)

What's Changed

• fix: error with validation results on invalid manifest after verify after sign by @ok-nick in #2147
• fix: make GIF box map C2PA placeholder len 0 rather than 1 by @ok-nick in #2156
• fix: Harden against unchecked array index in JUMBF brotli box accessor by @ak-singh in #2192
• fix: Dup redaction by @mauricefisher64 in #2199
• fix: Harden against integer underflow in JUMBF box parsers by @ak-singh in #2200
• fix: Exact ingredient redaction URI matching by @tmathern in #2203
• chore: release by @caiopensrc in #2194

Full Changelog: c2patool-v0.26.61...c2pa-v0.85.2