CVE-2026-65067

Data::Intern::Shared (Perl) before version 0.02 creates an mmap-backed sharing segment using open(path, O_RDWR|O_CREAT, 0666) in intern.h. The resulting mode 0666, subject to umask 022, yields a world-readable file (0644). O_NOFOLLOW is not used, so a symlink at the path is followed, and O_EXCL i...

CVE-2026-59145

CVE-2026-59145 affects Data::Intern::Shared before 0.02 (Perl). The vulnerability arises from an out-of-bounds read in si_idx_find due to unvalidated indices: slots[i].id, reverse[], and the arena length prefix are used without bounds checks against count or arena_used. The lookup traverses a tri...