CVE-2026-41082
Published Apr 16, 2026In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
- evidence mentions
- 8
- Buzz score
- 42.0
Vendor/product archive
ocaml / opam CVEs
Beta · best-effort1 CVEs tagged to ocaml / opam — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
Showing 1-1 of 1 CVEsPage 1 of 1