| Package | Affected versions | Patched versions |
|---|---|---|
| ocaml | = 1.07= 2.02= 2.04= 2.99= 3.00= 3.01= 3.02= 3.03= 3.04= 3.05= 3.06= 3.07= 3.08= 3.09= 3.10= 3.11= 3.12≤ 3.12.1 |
OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free