[perl #131079] [SECURITY] regex injection allows arbitrary execution using dynamic method lookup

[Brian S. Julin via RT]

On Thu, 30 Mar 2017 05:41:29 -0700, lloyd.fo...@gmail.com wrote:
> my $regex-from-user = '{ shell "/bin/sh" }';
> try say "foo" ~~ /<$regex-from-user>/; # won't work
> $regex-from-user = '<::(shell "/bin/sh")>';
> try say "foo" ~~ /<$regex-from-user>/; # you got owned


rakudo PR 1168 has been submitted to deal with this issue.