CVE-2026-82481 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 51.7%

Debian Releases

Debian Product

Codename

ocaml-cohttp

bookworm	postponed
forky	vulnerable
sid	vulnerable
trixie	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

ocaml-cohttp

jammy	needs-triage
noble	needs-triage
resolute	needs-triage

Common Weakness Enumeration

CWE-180 - Incorrect Behavior Order: Validate Before Canonicalize
The software validates input before it is canonicalized, which prevents the software from detecting data that becomes invalid after the canonicalization step.

References

https://github.com/mirage/ocaml-cohttp/pull/1145