VYPR

Data::DisjointSet::Shared

by Perl Foundation

CVEs (2)

  • CVE-2026-65069Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022 the file is…

  • CVE-2026-59147Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach-time validator dsu_validate_header checks the header scalars and region layout against the file size, but does not validate the…