What the vulnerability does

01Description

caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.

Key dates

02Disclosure timeline

October 26, 2021 CVE published
August 7, 2024 Record updated