CVE-2026-11526

CVE-2026-11526 affects GD for Perl prior to 2.86. The flaw occurs in GD::Image::_make_filehandle, which uses Perl’s 2-arg open() on a filename argument. If the filename begins/ends with a pipe or starts with a redirect, it can execute a command or overwrite files instead of opening a normal file....