Starman-0.4005-TRIAL

Security Advisories (1)

CVE-2026-40560 (2026-04-28)

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.

Changes for version 0.4005 - 2013-08-13

Fix SSL implementation bug where body longer than 16K doesn't get written correctly #78 (kazeburo, siracusa)

Documentation

starman

Starman launcher

Modules

Plack::Handler::Starman

Plack adapter for Starman

Starman

High-performance preforking PSGI/Plack web server

Provides

HTTP::Server::PSGI::Net::Server::PreFork

in lib/HTTP/Server/PSGI/Net/Server/PreFork.pm

Starman::Server

in lib/Starman/Server.pm

Other files

To install Starman, copy and paste the appropriate command in to your terminal.

cpanm

cpanm Starman

CPAN shell

perl -MCPAN -e shell
install Starman

For more information on module installation, please visit the detailed CPAN module installation guide.

	Global
`s`	Focus search bar
`?`	Bring up this help dialog

	GitHub
`g` `p`	Go to pull requests
`g` `i`	Go to GitHub issues (only if GitHub is preferred repository)

	POD
`g` `a`	Go to author
`g` `c`	Go to changes
`g` `i`	Go to issues
`g` `d`	Go to dist
`g` `r`	Go to repository/SCM
`g` `s`	Go to source
`g` `b`	Go to file browse

Search terms
module: (e.g. module:Plugin)
distribution: (e.g. distribution:Dancer auth)
author: (e.g. author:SONGMU Redis)
version: (e.g. version:1.00)

Changes for version 0.4005 - 2013-08-13

Documentation

Modules

Provides

Other files

Module Install Instructions

Keyboard Shortcuts