Lucene search
+L

2 matches found

Mageia
Mageia
•added 2026/08/03 6:47 p.m.•19 views

Updated perl-GD package fixes a security vulnerability

The updated package fixes a security vulnerability: GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. CVE-2026-11526...

9.8CVSS5.8AI score0.01353EPSS
SaveExploits0References7
NVD
NVD
•added 2026/06/14 12:16 p.m.•18 views

CVE-2026-11526

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...

9.8CVSS0.01353EPSS
SaveExploits0References4
Rows per page
Query Builder