← Back to CVE search

CVE-2026-41082

OCaml opam

Description

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

EPSS 0.2%
Published
2026-04-16 18:16:45
View source
Affected versions
<2.5.1
Type
Package
Operating systems
Linux