CVE-2026-64617 Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in pubsub.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...

CVE-2026-64617

Data::PubSub::Shared for Perl (versions before 0.07) creates a world-readable mmap backing file via pubsub.h open(path, O_RDWR|O_CREAT, 0666) and may follow a pre-planted symlink because O_NOFOLLOW and O_EXCL are not used. With mode 0666 and umask 022, the resulting file is typically 0644 (world-...