Memory Exhaustion Vulnerability in Starlet for Perl

CVE-2026-115865

What is CVE-2026-115865?

A vulnerability exists in Starlet versions prior to 0.33 for Perl, where an attacker can exploit the system by sending a request with a large Content-Length. This action leads to excessive memory consumption as the server attempts to read a request body that exceeds the available memory. Consequently, the affected worker can crash with an uncatchable out-of-memory error, prompting a forced restart of the worker. This type of attack enables remote attackers to disrupt service with minimal data sent.

References