CVE-2026-89087

Summary

The cstruct package before 6.3.0 for OCaml mishandles indexes.

Affected Software

VendorProductVersion RangeStatus
OCamlcstruct0 < 6.3.0affected

Weaknesses

  • CWE-573: CWE-573 Improper Following of Specification by Caller

References