Fix: CVE-2016-1238 recent perl doesn't include cwd