FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2026-05-05 16:10:25 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
9b5d6fbb-4893-11f1-82bf-3c7c3fba4204devel/ocaml-opam -- CWE-24 Path Traversal: '../filedir'

https://github.com/ocaml/opam/releases/tag/2.5.1 reports:

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

Reported by Andrew Nesbitt .


Discovery 2026-04-16
Entry 2026-05-05
ocaml-opam
< 2.5.1

CVE-2026-41082
https://cveawg.mitre.org/api/cve/CVE-2026-41082