GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.