RURBAN GD

• CVE-2026-11526 Critical 9.8 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle 1.4%