c2pa

What's Changed

• fix: Hardening against potential deep recursion in update manifests with parent cycles (backport #2493) by @caiopensrc in #2501
• chore: release by @caiopensrc in #2502

Full Changelog: c2pa-v0.90.14...c2pa-v0.90.15

What's Changed

• fix: Diamond inputTo manifest exponential reverifications depending on ingredient paths reachability (backport #2492) by @caiopensrc in #2498
• chore: release by @caiopensrc in #2499

Full Changelog: c2pa-v0.90.13...c2pa-v0.90.14

What's Changed

• fix(sdk): Parse PEM cert chain to DER for RemoteSigner (backport #2414) by @caiopensrc in #2481
• chore: release by @caiopensrc in #2495

Full Changelog: c2pa-v0.90.12...c2pa-v0.90.13

13 July 2026

Documented

• Fix docs build, take 2 (#2297)
• Fix docs build (#2296)

Fixed

• Harden against integer underflow attacks in PNG iTxt chunks XMP parsing (#2274)
• Harden against integer overflow attacks in BMFF parser (#2280)
• Resource_to_stream returns error for unknown resource URIs instead of manifest JUMBF (#2289) (#2290)

09 July 2026

Fixed

• Bind OCSP response certId to the signing certificate (CAI-11829) (#2273)
• Fix new Clippy warnings for Rust 1.97.0 (#2279)
• Ensure created has a dst and don't add parent when actions already exist (#2264)
• Integer overflow panic in bmff_to_jumbf_exclusions via DataMap offset addition (#2263)

07 July 2026

Documented

• Update README.md doc links (#2261)

Fixed

• Resolve crate audit advisories (lopdf, quick-xml, crossbeam-epoch, ttf-parser) (#2268)
• Don't serialize empty values (#2254)
• CAI-10364 (Server-Side Request Forgery (SSRF) via CAWG did:web Resolution during Post-Validation ) (#2168)

Other

• Lazy load all ingredient resources & remove old to_archive zip format. (#2173)

19 June 2026

Added

• Add source to HttpResolverError::Other error message (#2237)
• Auto format detect for Reader (#2181)

Fixed

• Harden JUMBF and JPEG XL parsers against Brotli decompression bombs (#2210)

11 June 2026

Added

• Remove some long deprecated APIs (#2206)

Removal of deprecated APIs

Release 0.88.0 removes several long-deprecated APIs. These are breaking changes; update your code before upgrading.

Rust API

The following Ingredient methods and types have been removed:

C FFI

The following C API functions have been removed:

11 June 2026

Added

• [breaking] Split c2pa-raw-crypto into its own crate (#2202)

Fixed

• Improve ingredientMismatch error messages (#2225)
• Noop test new release workflow (#2221)

Other

• Revert "feat!: Split c2pa-raw-crypto into its own crate (#2202)"
• Use latest release-plz and add a dry run job on release PRs (#2217)

08 June 2026

Fixed

• NOOP PR for release-plz trigger (#2215)

04 June 2026

Fixed

• [breaking] Remove unused Error variant types (#2195)
• Harden additional JUMBF parser sites against integer underflow (#2201)

03 June 2026

Fixed

• Exact ingredient redaction URI matching (#2203)
• Harden against integer underflow in JUMBF box parsers (#2200)
• Dup redaction (#2199)
• Harden against unchecked array index in JUMBF brotli box accessor (#2192)
• Make GIF box map C2PA placeholder len 0 rather than 1 (#2156)
• Error with validation results on invalid manifest after verify after sign (#2147)

01 June 2026

Fixed

• Preserve validation status log kind after deserialization (#2162)
• Declare c2pa XML namespace on SVG root, not manifest tag (#2113)

Other

• Avoid buffering intermediate streams if stream len is greater than threshold (#2178)
• Avoid buffering PNG when writing XMP and removing manifest (#2177)

27 May 2026

Added

• Support CAWG callback signing via c_ffi (#2118)

Fixed

• Sync resolver for CAWG web DID (#2172)
• Load ingredient manifest store esp. to load resources on search/load miss (#2164)
• Share reqwest HTTP clients (#2152)
• Improve archive APIs to be able to link archives to actions (#2095)
• Use XMP instance_id from source asset in sign and save_to_stream (#2158)
• Harden against Builder::base_path injection attack on archive deserialisation (#2139)
• Harden against integer overflow attacks in hash_stream_by_alg_with_progress range validation (#2140)

Other

• Skip intermediate stream copy for common signing path (#2161)
• Avoid buffering PNG into memory when writing (#2159)
• Avoid buffering stream when computing placeholder PNG C2PA chunk (#2154)
• Avoid buffering stream when computing placeholder JPEG C2PA chunk (#2155)
• Fix lints in newer Rust versions. (#2153)
• Optimize signing passes/copies for large PNGs (#1967)
• Optimize signing passes/copies for large RIFFs (#1970)
• Optimize signing passes/copies for large JPEGs (#1971)
• Lazy-load ingredient manifest stores from shared Arc<Store> (#2103)
• Consolidate embeddable async functions (#2149)
• Consolidate async verify functions (#2146)

12 May 2026

Fixed

• Case-insensitive enums in settings to preserve backwards compatibility with config crate (#2138)

11 May 2026

Fixed

• Archive preserves duplicate label assertions (#2135)

Other

• [breaking] Remove config crate and use serde_json directly (#2132)

11 May 2026

Added

• Large and complex benchmark suite (#2116)

Fixed

• Reduce allocations in redactions (#2127)
• Allow boxes with incomplete content to succeed. (#2125)

Other

• Update cargo-udeps setup (#2047)

04 May 2026

Fixed

• Harden against integer underflow attack in GIF XMP validation (#2099)
• Harden error code mapping for hash mismatch in validator (#2101)
• Update logic for stale thumbnails detection in redaction (#2107)

01 May 2026

Fixed

• Harden against unbounded HTTP response body read in DID web server (#2070)

01 May 2026

Added

• Make c2pa_reason an enum (#2100)

Fixed

• Harden against integer underflow attacks in parsing purpose field in BMFF UUID box (#2097)
• Harden against integer overflow attack in png chunk hashing for 32 bit WASM architecture (#2102)
• [breaking] Use absolute URIs for ingredient thumbnails (#2098)

29 April 2026

Added

• Support DNG big data (#2092)
• Add init trust, trust sidecars, and atomic sidecar writes, plus fixes (#2093)

Updated dependencies

• Bump openssl from 0.10.77 to 0.10.78 (#2082)

28 April 2026

Documented

• Adds redaction docs and example (#2071)

Fixed

• c2pa-c-ffi UB detected by miri (#2089)
• Harden RSA validators against invalid BER sequences (#2065)
• Harden against deep linear ingredient chains with max limits (#2064)
• Harden BMFF hash merkel tree creation with max merkel leaves limits (#2063)
• Harden against image decompression bomb attacks in building thumbnail (#2062)
• Harden tiff parser against forged IFD entry count fields (#2059)
• Harden builder and resource store addition against path traversal zip slip attacks (#2066)

27 April 2026

Fixed

• Harden against empty certificates during OCSP certificate validation (#2067)
• Prevent duplicate timestamp assertion (#2085)
• Harden riff chunk parser against forged size field memory attacks (#2053)
• Harden bmff parsing against integer overflow attack (#2054)
• Harden against cyclic IFD chain in tiff parser (#2068)

16 April 2026

Added

• Add ingredient archive FFI functions and relax Builder mutability (#2061)
• Compressed manifest (#2027)

Documented

• Separate out C docs (#2052)

Fixed

• Multi rendition support (#2058)

15 April 2026

Fixed

• Handle more thumbnail redaction edge cases (#2049)

14 April 2026

Fixed

• Run cargo fmt (#2046)
• Wrap Error::NotImplemented in Err() for wasip1 tempfile_builder (#2037)
• Limit the maximum number of assertions allowed for C2PA Manifest (#1951)

Deprecation of thread-local settings APIs

Release 0.79.4 deprecates all legacy thread-local configuration APIs in favor of explicit Context-based equivalents. These are not breaking changes: All deprecated methods retain their original behavior and continue to work, but will produce compiler warnings. Note that some of these deprecated methods were subsequently removed in Version 0.88.0.

Rust API

Builder::default() and Reader::default() are now the idiomatic way to construct with default settings, replacing the more verbose Builder::from_context(Context::new()) and Reader::from_context(Context::new()).

The following methods are now deprecated:

To use custom settings, create a Context with Context::new().with_settings(...) and pass it to Builder::from_context(context) or Reader::from_context(context).

C FFI

The following C API functions are deprecated:

C and C++ headers now emit compiler deprecation warnings when deprecated functions are called.

09 April 2026

Added

• (sdk) Ingredient JUMBF archives, archive metadata typing (#2007)

Fixed

• Redaction follow-up fix (#2030)

08 April 2026

Fixed

• Harden against integer overflow panic in big tiff processing (#2012)
• Harden against integer underflow panic in assertion label parsing (#2013)
• Harden assertion label URI parsing logic to fix index out of bounds access (#2018)
• Harden BMFF hash merkle validation via count/range mismatch (#2019)
• Harden BmffHash timed media chunk verification against out of bounds access issue (#2020)
• Harden BMFF Merkle maps processing logic to avoid panic (#2021)
• Harden against invalid MP4 files during BmffHash timed-media chunk mapping (#2022)
• Redact thumbnails when ingredient with thumbnails added through add_ingredient is being thumbnail-redacted too (#2016)
• Allow any file type to be signed with a sidecar (#2014)

07 April 2026

Fixed

• Redact thumbnails in databoxes (v1 claims) (#2015)

03 April 2026

Fixed

• Redacting things in multiple ingredients (#2009)
• Adds more granular progress for validation (#2006)
• [breaking] Disable HTTP redirects in restricted networking implementation (#1907)

31 March 2026

Added

• Expose a C FFI API to help determine the hashtype a Builder uses with embeddable APIs (#1992)
• Add support for JPEG XL file format (#1870)

Fixed

• Switch to Firefox for CI web tests (#1999)

Other

• Fix clippy lints (#1996)

27 March 2026

Added

• Adds a progress/cancel feature to Context for the c2pa-rs sdk (#1927)

Fixed

• Harden JUMB embed media description box parser against integer underflow attack (#1950)
• Harden JUMB description box parser against integer underflow attack (#1949)
• Harden JUMBF nested box parsing against stack overflow attack (#1966)
• Harden BMFF Merkle tree hash processing code against integer underflow attack (#1963)
• Updated crJSON Schema (#1975)
• TIFF backcompatibility for RAW formats (#1976)
• Check for malicious recursion (#1979)

23 March 2026

Added

• Add FLAC format support (#1912)

23 March 2026

Added

• Add cr_json() and cr_json_value() to Reader; remove separate CrJsonReader (#1919)

Fixed

• Add compatibility for source assets that report mdat box sizes that e… (#1956)
• Change Builder::add_action to add original actions or v2 actions (#1946)

16 March 2026

Fixed

• Pin atree to 0.5.2 (#1940)
• Remove exponential memory growth from nested claim reconstruction (#1885) (#1887)

13 March 2026

Added

• Impl Send + Sync on EphemeralSigner (#1934)

Fixed

• Apply same restrictions on ingredient deltas as active manifest for validation state (#1624)

12 March 2026

Fixed

• Windows Build flags (#1930)

12 March 2026

Fixed

• Fragmented video verification (#1925)

11 March 2026

Added

• Emscripten (#1886)

Fixed

• Correct validation of OCSP signature (#1863)
• Merkle api integration (#1902)

10 March 2026

Documented

• Combine docs on Context and Settings to reduce duplication (#1899)

04 March 2026

Added

• Embeddable manifest API with Context/Settings, CAWG and BMFF.v3 support. (#1847)

Embeddable API

Release 0.77.0 adds a new embeddable manifest API with Context/Settings, CAWG, and BMFF.v3 support. For details, see Embeddable signing API.

API changes for C2PA 2.2

Reader has some new methods:

• validation_state() returns ValidationState, which can be Invalid, Valid, or Trusted. Use this method instead of checking for validation_status() = None.
• validation_results() returns ValidationResults, which is a more complete form of ValidationStatus and returns success, informational, and failure codes for the active manifest and ingredients. ValidationStatus is deprecated in favor of ValidationResults.

Ingredient now supports a validation_results() method and a validation_results field.

An AssetType assertion is now supported.

C2PA v2 claims

[!NOTE] The library now supports C2PA v2 claims by default. V2 claims have many new checks and status codes.

Additionally:

• The title() and format() methods of both Manifest and Ingredient objects now return an Option<String> because in v2 claims, title is optional and format does not exist.
• The first action must be c2pa.created or c2pa.opened (which requires an ingredient).

[!WARNING] Implementations should not generate deprecated v1 claims. If needed, though, you can generate v1 claims by setting the Builder manifest definition claim_version field to 1.

03 March 2026

Fixed

• Panic when validating boxes hash with no names (#1897)

02 March 2026

Fixed

• Handle meta box without FullBox header from Apple devices (#1889)

Updated dependencies

• Bump png_pong from 0.9.3 to 0.10.0 (#1850)
• Bump toml from 0.9.12+spec-1.1.0 to 1.0.2+spec-1.1.0 (#1883)

23 February 2026

Added

• Enable self-signed ephemeral certs on Wasm build (#1858)

Documented

• Fix doc for verify_after_sign due to bug (#1876)
• Doc cleanup and some reorg (#1822)
• SignerSettings doc comments (#1856)

Fixed

• Use cose_sign1 signature field for timestamp assertion verification (#1867)
• [breaking] Allow Builder::sign_async future to be spawnable on Tokio runtime (#1846)

Updated dependencies

• Bump zip from 7.4.0 to 8.1.0 (#1864)
• Bump zip from 6.0.0 to 7.4.0 (#1857)

12 February 2026

No-op re-release to address previous build failure.

12 February 2026

Added

• Use ephemeral self-signed cert to sign working store / archive (#1839)