CVE-2026-65069 Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in dsu.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

CVE-2026-59147

Data::DisjointSet::Shared for Perl versions before 0.02 is vulnerable to out-of-bounds reads/writes in dsu_find due to an unvalidated parent index. The attach-time validator validates header and region against the file size but does not validate the contents of the parent array; dsu_find uses raw...