Most recent entries from all

EUVD-2026-307962

2026-10-04T03:10:08.099663+00:00

EUVD-2026-307962

fkie_cve-2026-40560

2026-10-04T03:10:08.099701+00:00

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.

Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.

An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.

GHSA-gwjf-hg8j-jwvr

2026-10-04T03:10:08.099740+00:00

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.

Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence.

An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.

openSUSE-SU-2026:10757-1 — perl-Starman-0.4018-1.1 on GA media

2026-10-04T03:10:08.099760+00:00

perl-Starman-0.4018-1.1 on GA media

UBUNTU-CVE-2026-40560

2026-10-04T03:10:08.099779+00:00

Affected: Ubuntu:16.04:LTS: starman, Ubuntu:18.04:LTS: starman, Ubuntu:20.04:LTS: starman, Ubuntu:22.04:LTS: starman, Ubuntu:24.04:LTS: starman, Ubuntu:25.10: starman, Ubuntu:26.04:LTS: starman

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.