CVE-2026-65067 Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in intern.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-65067

Data::Intern::Shared (Perl) before version 0.02 creates an mmap-backed sharing segment using open(path, O_RDWR|O_CREAT, 0666) in intern.h. The resulting mode 0666, subject to umask 022, yields a world-readable file (0644). O_NOFOLLOW is not used, so a symlink at the path is followed, and O_EXCL i...

CVE-2026-65066

CVE-2026-65066 affects Data::RingBuffer::Shared before 0.04 for Perl. The vulnerability arises because the ring buffer segment is created with open(path, O_RDWR|O_CREAT, 0666) in ring.h, yielding a world-readable file (0666) that becomes 0644 under the default umask. Without O_EXCL or O_NOFOLLOW,...

CVE-2026-65065 Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in roaring.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-65065

Data::RoaringBitmap::Shared for Perl versions before 0.02 contains a world-readable mmap backing file created by open(path, O_RDWR|O_CREAT, 0666) in roaring.h. The mode 0666 with default umask 022 yields 0644 (world-readable). Absence of O_NOFOLLOW allows a symlink at the path to be followed, and...

CVE-2026-65064

CVE-2026-65064 affects Data::HashMap::Shared versions before 0.14 (Perl). A world-readable mmap backing file is created with mode 0666 and opened without O_EXCL or O_NOFOLLOW, allowing a pre-created file or symlink to be used and enabling local access to IPC payloads in shared directories like /t...

CVE-2026-65064 Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in shmgeneric.h with openpath, ORDWR | OCREAT | OCLOEXEC, 0666. The mode is 0666, so under the default umask 022 the file is created mode 06...

CVE-2026-65063 Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in radix.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-65063

Data::RadixTree::Shared for Perl prior to 0.02 creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666). The file is created with mode 0666 so under umask 022 it is 0644 (world-readable). With O_NOFOLLOW missing and O_EXCL missing, a symlink or pre-created file at the path ...

CVE-2026-65062

Data::SortedSet::Shared for Perl (before 0.03) creates an mmap backing file with mode 0666 and opens it with O_RDWR|O_CREAT, but without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h with open(path, O_RDWR|O_CREAT, 0666). With umask 022, the resulting file is world-readable (0644). ...

CVE-2026-65061

CVE-2026-65061 affects Data::ReqRep::Shared for Perl before version 0.05. It creates a mmap-backed IPC segment using open(path, O_RDWR|O_CREAT, 0666) in reqrep.h, with mode 0666 so the backing file is world-readable (0644 under umask 022). O_NOFOLLOW is not used and O_EXCL is absent, allowing a s...

CVE-2026-65061 Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in reqrep.h with openpath, ORDWR | OCREAT, 0666, for both the request-reply and the integer-variant segments. The mode is 0666, so under the...

CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64617

Data::PubSub::Shared for Perl (versions before 0.07) creates a world-readable mmap backing file via pubsub.h open(path, O_RDWR|O_CREAT, 0666) and may follow a pre-planted symlink because O_NOFOLLOW and O_EXCL are not used. With mode 0666 and umask 022, the resulting file is typically 0644 (world-...

CVE-2026-64616 Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in ndarray.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-64616

CVE-2026-64616 affects Data::NDArray::Shared for Perl versions before 0.02. The code creates a mmap backing file with mode 0666 via open(path, O_RDWR|O_CREAT, 0666) in ndarray.h, so the file becomes world-readable (0644 after umask). With O_NOFOLLOW absent, a symlink can be followed; with O_EXCL ...

CVE-2026-64615

Data::Graph::Shared (Perl)

CVE-2026-64615 Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in graph.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64614 Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64613 Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without ONOFOLLOW. The segment is created in bufgeneric.h with openpath, ORDWR|OCREAT|OEXCL, 0666. OEXCL blocks a pre-seeded file on create, but the mode is 0666, so under the default umask 02...