OCaml / Opam

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-57825	In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.	MEDIUM	5.7	Sep 9, 2026
CVE-2026-41082	ocaml-opam: path traversal via the .install field	HIGH	7.8	Apr 16, 2026

Rows per page

Showing 1 to 2 of 2 CVEs