| Package | Affected versions | Patched versions |
|---|---|---|
| opam | < 2.5.1 | 2.5.1 |
In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free