CVE-2026-65065

Data::RoaringBitmap::Shared for Perl versions before 0.02 contains a world-readable mmap backing file created by open(path, O_RDWR|O_CREAT, 0666) in roaring.h. The mode 0666 with default umask 022 yields 0644 (world-readable). Absence of O_NOFOLLOW allows a symlink at the path to be followed, and...