OCaml opam vulnerabilities

2 published CVEs name OCaml opam among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
OCaml · opam
Medium5.7
CVE-2026-41082
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
OCaml · opam
High7.3

Most common weaknesses