CVE-2026-115824

*** Pendiente de traducción *** Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.<br /> <br /> The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a huge chunk size and streams data, or sends a chunk-size line that never ends, grows the buffer for as long as it keeps sending.<br /> <br /> A remote attacker can exhaust worker memory with a single connection.