CVE-2026-89087HIGH NVDCVSS Score 7.3Severity HIGHPublished Sep 10, 2026Vendor unknownDescriptionThe cstruct package before 6.3.0 for OCaml mishandles indexes.Referenceshttps://osv.dev/vulnerability/OSEC-2026-20