OCaml mirage-crypto-ec
3 known vulnerabilities in OCaml mirage-crypto-ec, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-87737 CVSS 5.9 medium An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve…
- CVE-2026-87736 CVSS 4.3 medium An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for…
- CVE-2026-87733 CVSS 6.2 medium An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions {P256,P384,P521}.Dsa.pub_of_octets…