OCaml Weekly News, for the week of March 03 to 10, 2026
OCaml Weekly News, for the week of February 17 to 24, 2026
We (the #OCaml #security response team) https://ocaml.org/security published today an advisory for the OCaml runtime (Marshal decoding over-read) https://osv.dev/vulnerability/OSEC-2026-01
I'm happy we managed to coordinate this, turned out to be an excessive amount of work - fixing the runtime, fuzzing, performance testing, but also integrating into osv.dev -- any feedback is highly appreciated, esp. if we're missing out on best practices. Otherwise, please welcome OSEC to your vulnerability databases. We're here to stay. :)
If you like our work, please fund OCSF https://ocaml-sf.org or apply to our calls for proposals (or both ;) https://discuss.ocaml.org/t/ocaml-security-grants/
Have a nice evening 😍