Starman versions before 0.4019 for Perl (4 CVEs)

Posted by Robert Rothenberg on Oct 25 CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing...

Published 26-Oct-2026 01:00 UTC · First seen 26-Oct-2026 00:58 UTC

Sources

• Open Source Security · 26-Oct-2026