Ocaml vulnerabilities

Products

• Ocaml 6
• Mirage-crypto-ec 3
• Opam 2

Newest

• ocaml cstruct The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Fix available 7.3 HighSeptember 10, 2026
• appsup-dart jose In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only... CVE-2026-89086 Fix available 9.1 CriticalSeptember 10, 2026
• ocaml mirage-crypto-ec An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing... CVE-2026-87737 Fix available 5.9 MediumAugust 17, 2026
• ocaml mirage-crypto-ec An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC... CVE-2026-87736 Fix available 4.3 MediumAugust 7, 2026
• ocaml mirage-crypto-pk An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an... CVE-2026-87735 Fix available 4.3 MediumAugust 7, 2026
• ocaml utcp An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment... CVE-2026-87734 Fix available 7.5 HighJuly 27, 2026
• ocaml mirage-crypto-ec An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA... CVE-2026-87733 Fix available 6.2 MediumJuly 27, 2026
• ocaml mirage-crypto An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM... CVE-2026-87732 Fix available 6.2 MediumJuly 27, 2026
• ocaml opam In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed... CVE-2026-57825 Fix available 5.7 MediumJuly 7, 2026
• ocaml opam, debian linux, red hat enterprise linux 10 +1 more +3 more In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to... CVE-2026-41082 Fix available 7.3 HighApril 15, 2026
• ocaml In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of... CVE-2026-34353 Fix available 5.9 MediumMarch 27, 2026
• ocaml, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization ... CVE-2026-28364 Public exploitFix available 7.9 HighFebruary 17, 2026
• ocaml The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0... CVE-2018-9838 Fix available 9.8 CriticalApril 6, 2018
• ocaml OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue... CVE-2017-9779 Public exploitFix available 7.8 HighSeptember 7, 2017
• ocaml Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code... CVE-2017-9772 Fix available 9.8 CriticalJune 23, 2017
• ocaml, fedoraproject fedora, opensuse +2 more OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to... CVE-2015-8869 Fix available 9.1 CriticalApril 29, 2016
• ocaml postgresql-ocaml The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly... CVE-2009-2943 Fix available 7.5 HighOctober 14, 2009