Debian Security Advisory DSA 794-1 - Justin Rye noticed that polygen generates precompiled grammar objects world-writable, which can be exploited by a local attacker to at least fill up the filesystem.
f94b5e060af156595ac79ac0df446e54076e4cc41faa66dccb31ee8608127bf3