CVE-2026-65066

CVE-2026-65066 affects Data::RingBuffer::Shared before 0.04 for Perl. The vulnerability arises because the ring buffer segment is created with open(path, O_RDWR|O_CREAT, 0666) in ring.h, yielding a world-readable file (0666) that becomes 0644 under the default umask. Without O_EXCL or O_NOFOLLOW,...

CVE-2026-65064

CVE-2026-65064 affects Data::HashMap::Shared versions before 0.14 (Perl). A world-readable mmap backing file is created with mode 0666 and opened without O_EXCL or O_NOFOLLOW, allowing a pre-created file or symlink to be used and enabling local access to IPC payloads in shared directories like /t...

CVE-2026-64617

Data::PubSub::Shared for Perl (versions before 0.07) creates a world-readable mmap backing file via pubsub.h open(path, O_RDWR|O_CREAT, 0666) and may follow a pre-planted symlink because O_NOFOLLOW and O_EXCL are not used. With mode 0666 and umask 022, the resulting file is typically 0644 (world-...

CVE-2026-64614

Data::Deque::Shared for Perl (versions