https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 19:13:05 +0000 https://db.gcve.eu/vuln/cve-2026-115824 <p><strong>Affected:</strong> Starman</p> <p>Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.</p> <p>The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a huge chunk size and streams data, or sends a chunk-size line that never ends, grows the buffer for as long as it keeps sending.</p> <p>A remote attacker can exhaust worker memory with a single connection.</p> <p><strong>Affected:</strong> Starman</p> <p>Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.</p> <p>The chunked body decoder keeps each chunk in memory until the whole chunk and its CRLF have arrived, and sets no limit on the length of a chunk-size line. A client that declares a huge chunk size and streams data, or sends a chunk-size line that never ends, grows the buffer for as long as it keeps sending.</p> <p>A remote attacker can exhaust worker memory with a single connection.</p> https://db.gcve.eu/vuln/cve-2026-115824