Known vulnerabilities in OCaml opam
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-57825 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are… | 5.7 Medium | Sep 9, 2026 |
| CVE-2026-41082 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory | 7.3 High | Apr 16, 2026 |