OCaml

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 7.3HighSep 10, 2026OCaml cstructCVE-2026-89087The cstruct package before 6.3.0 for OCaml mishandles indexes.
• 9.1CriticalSep 10, 2026OCaml jose Crypto / certificateCVE-2026-89086In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key.
• 5.9MediumSep 9, 2026OCaml mirage-crypto-ecCVE-2026-87737An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.
• 4.3MediumSep 9, 2026OCaml mirage-crypto-ec Memory corruptionCVE-2026-87736An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.
• 4.3MediumSep 9, 2026OCaml mirage-crypto-pkCVE-2026-87735An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.
• 7.5HighSep 9, 2026OCaml utcp Denial of serviceCVE-2026-87734An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service.
• 6.2MediumSep 9, 2026OCaml mirage-crypto-ec Crypto / certificateCVE-2026-87733An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key.
• 6.2MediumSep 9, 2026OCaml mirage-crypto Crypto / certificateCVE-2026-87732An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.
• 5.7MediumSep 9, 2026OCaml opam Path traversal / file handlingCVE-2026-57825In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
• 7.3HighApr 16, 2026Ocaml opam Path traversal / file handlingCVE-2026-41082In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
• 5.9MediumMar 27, 2026ocaml Memory corruptionCVE-2026-34353In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
• 7.9HighFeb 27, 2026ocaml Memory corruptionCVE-2026-28364In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data.

See every OCaml entry on the dashboard.

Top products

• mirage-crypto-ec3 CVEs in the last year
• opam2 CVEs in the last year
• ocaml2 CVEs in the last year
• utcp1 CVE in the last year
• mirage-crypto-pk1 CVE in the last year
• mirage-crypto1 CVE in the last year
• jose1 CVE in the last year, 1 critical
• cstruct1 CVE in the last year