Opam

1 CVEs product

Monthly

CVE-2026-41082 HIGH PATCH This Week

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

Information Disclosure Opam

NVD GitHub VulDB

CVSS 3.1

7.8

EPSS

0.0%

CVE-2026-41082

EPSS 0% CVSS 7.8

HIGH PATCH This Week

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

Information Disclosure Opam

NVD GitHub VulDB