Debian Security Advisory DSA 794-1 – Justin Rye noticed that polygen generates precompiled grammar objects world-writable, which can be exploited by a local attacker to at least fill up the filesystem.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39815/dsa-794-1.txt
Source: https://packetstormsecurity.com/files/39815/Debian-Linux-Security-Advisory-794-1.html