CVE-2026-87735

The mirage-crypto-pk package prior to version 2.3.0 for OCaml has a vulnerability that allows for an undocumented exception during RSA encryption or decryption, potentially leading to unintended behavior or security weaknesses. This could compromise the confidentiality and integrity of cryptographic operations. Developers and organizations utilizing this package should prioritize updating to the latest version to mitigate potential risks.