CJCOLLIER Google::Auth

• CVE-2026-66902 Critical 9.8 Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call 0.7%
• CVE-2026-66901 High 7.5 Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON 0.5%