These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability in HTTP::Server::PSGI versions before 1.0056 for Perl allows a remote attacker to crash the server with a single request by declaring a large Content-Length. The server attempts to allocate as much memory as requested, leading to an out-of-memory error before the application is called. This issue affects Perl-based web servers using HTTP::Server::PSGI, particularly those running as a singl [truncated]
CVE-2026-115824 is a high-severity vulnerability in Starman versions before 0.4019 for Perl, allowing memory exhaustion via unbounded buffering of chunked request bodies. A remote attacker can exhaust worker memory with a single connection by declaring a huge chunk size and streaming data or sending a chunk-size line that never ends. This vulnerability can lead to memory exhaustion and potential denial-of [truncated]
CVE-2026-115823 is a critical vulnerability in Starman versions before 0.4019 for Perl, causing response body desynchronization on keep-alive connections due to improper handling of HEAD requests. This desynchronization can lead to responses being paired with the wrong requests, potentially allowing attackers to exploit the vulnerability. Defenders should prioritize verifying exposure of Starman servers, [truncated]
CVE-2026-115822 is a high-severity vulnerability in Starman versions before 0.4019 for Perl, allowing CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. This issue can be triggered by a remote attacker sending specially crafted requests to any route, potentially leading to worker CPU exhaustion. The vulnerability exists due to the regex pattern used to match chunk-size li [truncated]
CVE-2026-115817 Starman Denial of Service. A remote attacker can cause a denial of service in Starman versions before 0.4019 by stalling the request body to hold a worker indefinitely. Defenders and administrators should assess exposure and prioritize updating to version 0.4019 or later to prevent denial of service attacks. The vulnerability allows a client that sends complete headers and then stalls or t [truncated]