Issues

• Generator specVersion from insert() or settings is not normalized: unreadable manifests and duplicate keys

  contentauth/c2pa-rs#2828 · Filter by author mstattma opened on Oct 10, 2026

• C API: sign fragmented BMFF renditions from files

  contentauth/c2pa-rs#2826 · Filter by author mstattma opened on Oct 10, 2026

• Tracking: pass the C2PA validator conformance suite (c2pa-org/conformance#504)

  contentauth/c2pa-rs#2824 · Filter by author mrappard opened on Oct 9, 2026

• C FFI: c2pa_reader_crjson returns {} instead of an error when crJSON export fails

  contentauth/c2pa-rs#2813 · Filter by author mstattma opened on Oct 9, 2026

• Experimental feature: unstable_glb (GLB / binary glTF asset handler)

  contentauth/c2pa-rs#2802 · Filter by author christopher5106 opened on Oct 9, 2026

• Whole-file fragmented BMFF verification should reject maps without initHash

  contentauth/c2pa-rs#2799 · Filter by author mstattma opened on Oct 8, 2026

• Whole-file fragmented BMFF verification checks unrelated rendition Merkle maps

  contentauth/c2pa-rs#2797 · Filter by author mstattma opened on Oct 7, 2026

• Support RF64 WAV reading, or document the RIFF-only limitation

  contentauth/c2pa-rs#2792 · Filter by author t-miller opened on Oct 6, 2026

• Credential callback signature budget conflicts with complete identity-assertion reservation

  contentauth/c2pa-rs#2791 · Filter by author mstattma opened on Oct 6, 2026

• Fork-hosted workflows attempt upstream-owned Codecov uploads without credentials

  contentauth/c2pa-rs#2790 · Filter by author mstattma opened on Oct 6, 2026

• Credential-holder C signer leaks runtime sig_type strings

  contentauth/c2pa-rs#2789 · Filter by author mstattma opened on Oct 6, 2026

• No way to force live OCSP fetching when a manifest contains an embedded OCSP staple

  contentauth/c2pa-rs#2786 · Filter by author sherifhanna-google opened on Oct 6, 2026
  

• Reconciliation: stable has commits missing from main

  reconciliation
  contentauth/c2pa-rs#2780 · Filter by author github-actions opened on Oct 5, 2026
  4

• Regression in 0.91: Settings::with_value / set_value silently ignore legacy trust.trust_anchors (same class as #2663)

  contentauth/c2pa-rs#2742 · Filter by author adaschevici opened on Sep 29, 2026
  3

• c2pa-rs 0.91.0 raises or returns a different status than the v2.2 sample catalog

  contentauth/c2pa-rs#2738 · Filter by author gypa70 opened on Sep 27, 2026

• Stale 'good' OCSP response is reported as signingCredential.ocsp.revoked

  contentauth/c2pa-rs#2737 · Filter by author andyparsons opened on Sep 26, 2026
  1

• OCSP pre-check of certificate status assertions logs duplicate, current-time status codes

  contentauth/c2pa-rs#2736 · Filter by author andyparsons opened on Sep 26, 2026
  1

• Experimental feature: unstable_midi (Standard MIDI File asset handler)

  contentauth/c2pa-rs#2730 · Filter by author mrappard opened on Sep 25, 2026

• Experimental feature: unstable_html (native in-tree HTML asset handler, C2PA A.7)

  contentauth/c2pa-rs#2729 · Filter by author mrappard opened on Sep 25, 2026

• Stapled OCSP responses signed directly by the issuing CA (no certs) are discarded — RFC 6960 §4.2.2.2 case 1

  acceptedbug
  contentauth/c2pa-rs#2722 · Filter by author shruggingatlas opened on Sep 25, 2026
  2

• Ordinary signing of single-file fMP4 omits fragment Merkle binding

  acceptedbug
  contentauth/c2pa-rs#2714 · Filter by author mstattma opened on Sep 23, 2026
  2

• Signing fragmented MP4 corrupts TFRA random-access offsets

  acceptedbug
  contentauth/c2pa-rs#2709 · Filter by author mstattma opened on Sep 23, 2026
  2

• c2pa.soft-binding block value cannot be encoded as a CBOR bstr

  acceptedbug
  contentauth/c2pa-rs#2689 · Filter by author borisasadanin opened on Sep 21, 2026
  1

• ValidationResults::from_store construction is fragile and hard to safely extend

  acceptedtask
  contentauth/c2pa-rs#2681 · Filter by author scouten-adobe opened on Sep 18, 2026
  1

• Log informational status when ingredient cert-expiry finding is suppressed by attested insideValidity

  acceptedtask
  contentauth/c2pa-rs#2680 · Filter by author scouten-adobe opened on Sep 18, 2026
  1