CVE-2026-11527

Vulnerability : CVE-2026-11527 affects Config::IniFiles before 3.001000 for Perl, allowing OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Root cause : _make_filehandle opens the provided filename with Perl’s 2-arg open(). If the filename begi...

CVE-2026-11526

CVE-2026-11526 affects GD for Perl prior to 2.86. The flaw occurs in GD::Image::_make_filehandle, which uses Perl’s 2-arg open() on a filename argument. If the filename begins/ends with a pipe or starts with a redirect, it can execute a command or overwrite files instead of opening a normal file....