VendorsOCamlopamall versions
Vulnerabilities

OCaml opam (OCaml Package Manager)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2026-41082
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
Published 2026-04-16 · Analyzed
7.8EPSS 0.002