Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
OSEC-2026-18
  • github.com/ocaml/ocaml
  • opam/ocaml
 Marshal integer overflow leads to out-of-heap read 10 Sep
  • Fix available
  • Severity - 6.8 (Medium)
OSEC-2026-19
  • github.com/ulrikstrid/ocaml-jose
  • opam/jose
 JOSE: missing RSA signature verification 10 Sep
  • Fix available
  • Severity - 9.1 (Critical)
OSEC-2026-20
  • github.com/mirage/ocaml-cstruct
  • opam/cstruct
 Cstruct indexing bugs can corrupt filtered output and reverse parsing results 10 Sep
  • Fix available
  • Severity - 7.3 (High)
OSEC-2026-16
  • github.com/mirage/ocaml-cohttp.git
  • opam/cohttp
 Path traversal in Cohttp.Path.resolve_local_file 20 Aug
  • Fix available
  • Severity - 8.7 (High)
OSEC-2026-17
  • github.com/mirage/mirage-crypto
  • opam/mirage-crypto-ec
 Timing leak in NIST elliptic curves scalar multiplication 17 Aug
  • Fix available
  • Severity - 5.9 (Medium)
OSEC-2026-14
  • github.com/mirage/mirage-crypto.git
  • opam/mirage-crypto-pk
 RSA signature verification raises undocumented exception 07 Aug
  • Fix available
  • Severity - 4.3 (Medium)
OSEC-2026-15
  • github.com/mirage/mirage-crypto.git
  • opam/mirage-crypto-ec
 EC public key out of bounds read 07 Aug
  • Fix available
  • Severity - 4.3 (Medium)
OSEC-2026-11
  • git.robur.coop/robur/utcp.git
  • opam/utcp
 Out of order segment reassembly allows remote denial of service 27 Jul
  • Fix available
  • Severity - 7.5 (High)
OSEC-2026-12
  • github.com/mirage/mirage-crypto.git
  • opam/mirage-crypto
 AEAD `decrypt_into` functions writes plaintext before checking the tag 27 Jul
  • Fix available
  • Severity - 6.2 (Medium)
OSEC-2026-13
  • github.com/mirage/mirage-crypto.git
  • opam/mirage-crypto-ec
 ECDSA accepts the point at infinity as a P256, P384, P521 public key 27 Jul
  • Fix available
  • Severity - 6.2 (Medium)
OSEC-2026-10
  • github.com/ocaml/opam
  • opam/opam-devel
 opam install sandbox escape using symlinks 07 Jul
  • Fix available
  • Severity - 5.7 (Medium)
OSEC-2026-05
  • github.com/ocaml/ocaml
  • opam/ocaml
 Windows command execution via filename quotes. 18 Jun
  • Fix available
  • Severity - 6.1 (Medium)
OSEC-2026-04
  • github.com/ocaml/ocaml
  • opam/ocaml
 Bigarray.reshape integer overflow 18 Jun
  • Fix available
  • Severity - 6.1 (Medium)
OSEC-2026-09
  • git.robur.coop/robur/albatross.git
  • opam/albatross
 Albatross-console memory exhaustion 28 May
  • Fix available
  • Severity - 4.9 (Medium)
OSEC-2026-08
  • github.com/mirage/ocaml-tar
  • opam/tar
 Path traversal vulnerability in ocaml-tar 22 May
  • Fix available
  • Severity - 8.2 (High)
OSEC-2026-06
  • github.com/mirleft/ocaml-tls
  • opam/tls
 TLS-client (with TLS 1.3) does insufficient certificate checks (missing KeyUsage and ExtendedKeyUsage validation) 20 May
  • Fix available
  • Severity - 7.4 (High)
Load more...