Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
OSV Ocaml π« is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| osec-2026-21 | Str partial-match stale capture registers underflow | 2026-10-23T21:30:00Z | 2026-10-26T14:15:00Z |
| osec-2026-26 | runtime_events user event name-based type confusion | 2026-10-23T21:30:00Z | 2026-10-23T21:30:00Z |
| osec-2026-25 | Heap buffer overflow in the OCaml `runtime_events` consumer when parsing an oversized custom user event | 2026-10-23T21:30:00Z | 2026-10-23T21:30:00Z |
| osec-2026-24 | Multiple issues in command quoting on Windows | 2026-10-23T21:30:00Z | 2026-10-23T21:30:00Z |
| osec-2026-23 | Multiple issues in Marshal | 2026-10-23T21:30:00Z | 2026-10-23T21:30:00Z |
| osec-2026-22 | Integer overflow in Unix.map_file | 2026-10-23T21:30:00Z | 2026-10-23T21:30:00Z |
| osec-2026-09 | Albatross-console memory exhaustion | 2026-05-28T08:59:44Z | 2026-09-23T15:23:50Z |
| osec-2026-20 | Cstruct indexing bugs can corrupt filtered output and reverse parsing results | 2026-09-10T10:00:00Z | 2026-09-10T20:20:00Z |
| osec-2026-19 | JOSE: missing RSA signature verification | 2026-09-10T10:00:00Z | 2026-09-10T20:20:00Z |
| osec-2026-05 | Windows command execution via filename quotes. | 2026-06-18T13:45:00Z | 2026-09-10T10:45:00Z |
| osec-2026-18 | Marshal integer overflow leads to out-of-heap read | 2026-09-10T10:00:00Z | 2026-09-10T10:00:00Z |
| osec-2026-17 | Timing leak in NIST elliptic curves scalar multiplication | 2026-08-17T09:45:00Z | 2026-09-10T09:45:00Z |
| osec-2026-15 | EC public key out of bounds read | 2026-08-07T13:00:00Z | 2026-09-10T09:45:00Z |
| osec-2026-14 | RSA signature verification raises undocumented exception | 2026-08-07T13:00:00Z | 2026-09-10T09:45:00Z |
| osec-2026-13 | ECDSA accepts the point at infinity as a P256, P384, P521 public key | 2026-07-27T19:00:00Z | 2026-09-10T09:45:00Z |
| osec-2026-12 | AEAD `decrypt_into` functions writes plaintext before checking the tag | 2026-07-27T19:00:00Z | 2026-09-10T09:45:00Z |
| osec-2026-11 | Out of order segment reassembly allows remote denial of service | 2026-07-27T19:30:00Z | 2026-09-10T09:45:00Z |
| osec-2026-16 | Path traversal in Cohttp.Path.resolve_local_file | 2026-08-20T18:15:00Z | 2026-08-22T11:05:00Z |
| osec-2026-10 | opam install sandbox escape using symlinks | 2026-07-07T12:00:00Z | 2026-07-07T12:00:00Z |
| osec-2026-04 | Bigarray.reshape integer overflow | 2026-06-18T13:20:00Z | 2026-06-18T13:20:00Z |
| osec-2026-08 | Path traversal vulnerability in ocaml-tar | 2026-05-22T20:55:00Z | 2026-05-22T20:55:00Z |
| osec-2026-07 | TLS-server does insufficient client certificate checks (missing KeyUsage and ExtendedKeyUsage validation) | 2026-05-20T13:50:00Z | 2026-05-20T13:50:00Z |
| osec-2026-06 | TLS-client (with TLS 1.3) does insufficient certificate checks (missing KeyUsage and ExtendedKeyUsage validation) | 2026-05-20T13:50:00Z | 2026-05-20T13:50:00Z |
| osec-2026-03 | opam install sandbox escape | 2026-04-15T22:00:00Z | 2026-04-16T21:00:00Z |
| osec-2026-01 | Buffer Over-Read in OCaml Marshal Deserialization | 2026-02-17T13:30:00Z | 2026-02-27T09:30:00Z |
| osec-2026-02 | ARP unbounded memory usage | 2026-02-18T10:30:00Z | 2026-02-18T10:30:00Z |
| osec-2022-01 | Infinite loop in console output on xen | 2022-12-07T00:00:00Z | 2026-02-18T09:30:00Z |
| osec-2025-01 | Albatross console out of memory | 2025-08-15T00:18:22Z | 2026-01-13T12:00:00Z |
| osec-2019-02 | Grant unshare vulnerability in mirage-xen | 2019-04-26T00:00:00Z | 2026-01-13T12:00:00Z |
| osec-2019-01 | Memory disclosure in mirage-net-xen | 2019-03-21T00:00:00Z | 2026-01-13T12:00:00Z |