opam - OSV

OSEC-2026-20

github.com/mirage/ocaml-cstruct
opam/cstruct

Cstruct indexing bugs can corrupt filtered output and reverse parsing results 10 Sep

Fix available
Severity - 7.3 (High)

OSEC-2026-16

github.com/mirage/ocaml-cohttp.git
opam/cohttp

Path traversal in Cohttp.Path.resolve_local_file 20 Aug

Fix available
Severity - 8.7 (High)

OSEC-2026-17

github.com/mirage/mirage-crypto
opam/mirage-crypto-ec

Timing leak in NIST elliptic curves scalar multiplication 17 Aug

Fix available
Severity - 5.9 (Medium)

OSEC-2026-14

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-pk

RSA signature verification raises undocumented exception 07 Aug

Fix available
Severity - 4.3 (Medium)

OSEC-2026-15

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-ec

EC public key out of bounds read 07 Aug

Fix available
Severity - 4.3 (Medium)

OSEC-2026-12

github.com/mirage/mirage-crypto.git
opam/mirage-crypto

AEAD `decrypt_into` functions writes plaintext before checking the tag 27 Jul

Fix available
Severity - 6.2 (Medium)

OSEC-2026-13

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-ec

ECDSA accepts the point at infinity as a P256, P384, P521 public key 27 Jul

Fix available
Severity - 6.2 (Medium)

OSEC-2026-08

github.com/mirage/ocaml-tar
opam/tar

Path traversal vulnerability in ocaml-tar 22 May

Fix available
Severity - 8.2 (High)

OSEC-2026-02

github.com/mirage/arp
opam/arp

ARP unbounded memory usage 18 Feb

Fix available
Severity - 7.4 (High)

OSEC-2019-02

github.com/mirage/mirage-xen
opam/mirage-xen

Grant unshare vulnerability in mirage-xen 26 Apr 2019

Fix available
Severity - 7.7 (High)

OSEC-2019-01

github.com/mirage/mirage-net-xen
opam/netchannel

Memory disclosure in mirage-net-xen 21 Mar 2019

Fix available
Severity - 8.2 (High)

OSEC-2016-02

github.com/mirage/mirage-net-xen
opam/mirage-net-xen

Memory disclosure in mirage-net-xen 03 May 2016

Fix available
Severity - 6.5 (Medium)

Vulnerabilities