CVE-2026-64615

CVE-2026-64615 affects Data::Graph::Shared for Perl, specifically versions before 0.04. The implementation creates a world-readable mmap backing file by opening path with O_RDWR|O_CREAT and mode 0666 (leading to 0644 under default umask), without O_NOFOLLOW or O_EXCL checks. This enables local us...