OSEC-2026-05
Medium · 6.1CVSS
6.1
EPSS
—
Published
Jun 18, 2026
CISA due date
—
The record
Windows command execution via filename quotes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| opam | ocaml | 0 | 4.14.4 |
Related vulnerabilities
- OSEC-2026-04 Bigarray.reshape integer overflow Also affects ocaml
- CVE-2026-34353 In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant… Also affects ocaml
- CVE-2026-28364 In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal… Also affects ocaml
- OSEC-2026-01 Buffer Over-Read in OCaml Marshal Deserialization Also affects ocaml