Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-57825 1 Ocaml 1 Opam 2026-09-11 5.7 Medium
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
CVE-2026-41082 3 Debian, Ocaml, Redhat 4 Debian Linux, Ocaml, Opam and 1 more 2026-06-16 7.3 High
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.