OP
Product
opam
2
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add opam to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41082 | 7.8 | Apr 16 | In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory Affected: before 2.5.1 |
| CVE-2026-57825 | 5.7 | Sep 9 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files Affected: before 2.5.2 |
Showing 2