Debian/starlet: unknown
Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies. The decoder adds each read to one buffer of unconsumed input. Noth
Action: Upgrade starlet to 0.33-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.33-1 | - |
Fixed versions
| 0.33-1 |
Sources
- osv: DEBIAN-CVE-2026-116128#Debian:14/starlet
- https://security-tracker.debian.org/tracker/CVE-2026-116128
published · modified · JSON