OP
Product
opam
by OCaml · last CVE Sep 9, 2026
2
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add opam to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57825
5.7
0%
Sep 9
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files
Affected: before 2.5.2
Showing 1