VYPR

Data::ReqRep::Shared

by Perl Foundation

CVEs (2)

  • CVE-2026-65061Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in reqrep.h with open(path, O_RDWR | O_CREAT, 0666), for both the request-reply and the integer-variant segments. The…

  • CVE-2026-59139Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in reqrep_recv_locked. The attach-time validator reqrep_validate_header checks the header scalars and region layout against the file size, but does not…