Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OCaml — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting OCaml. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data for the OCaml programming language and its associated tooling ecosystem. It focuses on common weakness types identified in the Open Source Vulnerability database, specifically targeting issues related to memory safety, input validation, and privilege escalation within the compiler runtime, standard library modules, and development utilities such as OPAM packages. The content covers publicly disclosed security incidents and patches ranging from early 2000s foundational releases through recent updates in 2024, ensuring comprehensive historical context for long-term maintenance projects. Users can utilize this resource to track the vendor's security advisory history, analyze trends in reported weakness classes, and look up specific product versions to understand their vulnerability landscape. By centralizing these records, the page facilitates easier risk assessment for developers integrating OCaml into larger software architectures. It provides a structured view of how flaws are patched over time, helping teams prioritize updates based on severity and exploitability rather than just release dates. This approach supports proactive security management by highlighting recurring patterns in code quality and dependency management within the OCaml environment. The information presented here is derived from official vendor notices, community reports, and automated scanning results, offering a reliable baseline for compliance auditing and internal security reviews without overwhelming the reader with raw technical logs or unverified claims.

CVE ID Title CVSS Severity Published
CVE-2026-89087 OCaml cstruct 处理逻辑错误漏洞 — cstruct CWE-573 7.3 High 2026-09-10
CVE-2026-89086 OCaml jose 加密问题漏洞 — jose CWE-347 9.1 Critical 2026-09-10
CVE-2026-87737 OCaml mirage-crypto-ec 侧信道信息泄露漏洞 — mirage-crypto-ec CWE-208 5.9 Medium 2026-09-09
CVE-2026-87736 OCaml mirage-crypto-ec 缓冲区错误漏洞 — mirage-crypto-ec CWE-125 4.3 Medium 2026-09-09
CVE-2026-87735 OCaml mirage-crypto-pk 输入验证错误漏洞 — mirage-crypto-pk CWE-1284 4.3 Medium 2026-09-09
CVE-2026-87734 OCaml utcp 授权问题漏洞 — utcp CWE-923 7.5 High 2026-09-09
CVE-2026-87733 OCaml mirage-crypto-ec 加密问题漏洞 — mirage-crypto-ec CWE-295 6.2 Medium 2026-09-09
CVE-2026-87732 OCaml mirage-crypto 加密问题漏洞 — mirage-crypto CWE-347 6.2 Medium 2026-09-09
CVE-2026-57825 OCaml opam 后置链接漏洞 — opam CWE-61 5.7 Medium 2026-09-09
CVE-2026-41082 opam 安全漏洞 — opam CWE-24 7.3 High 2026-04-16
CVE-2026-34353 ocaml 输入验证错误漏洞 — OCaml CWE-190 5.9 Medium 2026-03-27
CVE-2026-28364 OCaml Security Advisory Database 安全漏洞 — OCaml CWE-126 7.9 High 2026-02-27

This page lists every published CVE security advisory associated with OCaml. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.