CVE-2026-41082
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Apr 16, 2026
Vendor
unknown
Description
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.