VYPR

Data-HashMap-Shared

by EGOR

CVEs (2)

  • CVE-2026-65064Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in shm_generic.h with open(path, O_RDWR | O_CREAT | O_CLOEXEC, 0666). The mode is 0666, so under the default umask 022…

  • CVE-2026-59142Jul 21, 2026
    risk 0.00cvss epss 0.00

    Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read via an unvalidated arena offset and length in shm_str_copy. The attach-time validator shm_validate_header checks the header scalars and region layout against the file size, but does not validate the…