Approved changes feed: RSS · Atom

cpe:2.3:a:ocaml:opam:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOcaml (516274c5-24e8-55f0-bc4d-b2647c231d48)
ProductOpam (9abaa459-491e-5249-9623-febc7ed23d72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/ocaml/opam purl2cpe 2026-07-28 16:41:07.771183

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-41082 vulnerable 2026-06-08 08:03:14.709408 Details available
HIGH (7.3)
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
Published: 2026-04-16T17:32:40.068Z
Updated: 2026-07-15T01:00:03.411Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.