Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-57825

Sandbox Bypass via Symlink Mishandling in opam .install Files

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Ocaml
Products
Opam
CVE-2026-41082

ocaml-opam: path traversal via the .install field

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Debian Ocaml Redhat
Products
Debian Linux Ocaml Opam and 1 more