opam - OSV

OSEC-2026-21

github.com/ocaml/ocaml
opam/ocaml

Str partial-match stale capture registers underflow 16 hours ago

Fix available
Severity - 5.5 (Medium)

OSEC-2026-22

github.com/ocaml/ocaml
opam/ocaml

Integer overflow in Unix.map_file 16 hours ago

Fix available
Severity - 5.5 (Medium)

OSEC-2026-23

github.com/ocaml/ocaml
opam/ocaml

Multiple issues in Marshal 16 hours ago

Fix available
Severity - 6.8 (Medium)

OSEC-2026-24

github.com/ocaml/ocaml
opam/ocaml

Multiple issues in command quoting on Windows 16 hours ago

Fix available
Severity - 7.3 (High)

OSEC-2026-25

github.com/ocaml/ocaml
opam/ocaml

Heap buffer overflow in the OCaml `runtime_events` consumer when parsing an... 16 hours ago

Fix available
Severity - 4.5 (Medium)

OSEC-2026-26

github.com/ocaml/ocaml
opam/ocaml

runtime_events user event name-based type confusion 16 hours ago

Fix available
Severity - 4.5 (Medium)

OSEC-2026-18

github.com/ocaml/ocaml
opam/ocaml

Marshal integer overflow leads to out-of-heap read 10 Sep

Fix available
Severity - 6.8 (Medium)

OSEC-2026-19

github.com/ulrikstrid/ocaml-jose
opam/jose

JOSE: missing RSA signature verification 10 Sep

Fix available
Severity - 9.1 (Critical)

OSEC-2026-20

github.com/mirage/ocaml-cstruct
opam/cstruct

Cstruct indexing bugs can corrupt filtered output and reverse parsing results 10 Sep

Fix available
Severity - 7.3 (High)

OSEC-2026-16

github.com/mirage/ocaml-cohttp.git
opam/cohttp

Path traversal in Cohttp.Path.resolve_local_file 20 Aug

Fix available
Severity - 8.7 (High)

OSEC-2026-17

github.com/mirage/mirage-crypto
opam/mirage-crypto-ec

Timing leak in NIST elliptic curves scalar multiplication 17 Aug

Fix available
Severity - 5.9 (Medium)

OSEC-2026-14

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-pk

RSA signature verification raises undocumented exception 07 Aug

Fix available
Severity - 4.3 (Medium)

OSEC-2026-15

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-ec

EC public key out of bounds read 07 Aug

Fix available
Severity - 4.3 (Medium)

OSEC-2026-11

git.robur.coop/robur/utcp.git
opam/utcp

Out of order segment reassembly allows remote denial of service 27 Jul

Fix available
Severity - 7.5 (High)

OSEC-2026-12

github.com/mirage/mirage-crypto.git
opam/mirage-crypto

AEAD `decrypt_into` functions writes plaintext before checking the tag 27 Jul

Fix available
Severity - 6.2 (Medium)

OSEC-2026-13

github.com/mirage/mirage-crypto.git
opam/mirage-crypto-ec

ECDSA accepts the point at infinity as a P256, P384, P521 public key 27 Jul

Fix available
Severity - 6.2 (Medium)

Vulnerabilities