https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:16:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-41082 <p><strong>Affected:</strong> OCaml opam, Red Hat Enterprise Linux 10</p> <p>In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.</p> <p><strong>Affected:</strong> OCaml opam, Red Hat Enterprise Linux 10</p> <p>In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.</p> https://vulnerability.circl.lu/vuln/cve-2026-41082 https://vulnerability.circl.lu/vuln/usn-8256-1 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: opam, Ubuntu:22.04:LTS: opam, Ubuntu:Pro:24.04:LTS: opam, Ubuntu:25.10: opam, Ubuntu:Pro:26.04:LTS: opam</p> <p>Andrew Nesbitt discovered that opam did not properly validate file destination paths in package install files. An attacker could use this issue to bypass sandbox protections and write files to arbitrary locations, possibly leading to arbitrary code execution.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: opam, Ubuntu:22.04:LTS: opam, Ubuntu:Pro:24.04:LTS: opam, Ubuntu:25.10: opam, Ubuntu:Pro:26.04:LTS: opam</p> <p>Andrew Nesbitt discovered that opam did not properly validate file destination paths in package install files. An attacker could use this issue to bypass sandbox protections and write files to arbitrary locations, possibly leading to arbitrary code execution.</p> https://vulnerability.circl.lu/vuln/usn-8256-1