CVE-2026-65063

Data::RadixTree::Shared for Perl prior to 0.02 creates a world-readable mmap backing file via open(path, O_RDWR|O_CREAT, 0666). The file is created with mode 0666 so under umask 022 it is 0644 (world-readable). With O_NOFOLLOW missing and O_EXCL missing, a symlink or pre-created file at the path ...