Fixed with https://github.com/rakudo/rakudo/commit/bdd8143e6f, tests needed
> On 1 Jul 2017, at 15:20, Jan-Olof Hendig (via RT) > <perl6-bugs-follo...@perl.org> wrote: > > # New Ticket Created by Jan-Olof Hendig > # Please include the string: [perl #131684] > # in the subject line of all future correspondence about this issue. > # <URL: https://rt.perl.org/Ticket/Display.html?id=131684 > > > > This is a vulnerability and should probably be fixed. > > Discussion here: https://irclog.perlgeek.de/perl6-dev/2017-07-01#i_14812827
