Starman-0.4009 - High-performance preforking PSGI/Plack web server - metacpan.org

Security Advisories (1)

CVE-2026-40560 (2026-04-28)

Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse proxy.

Changes for version 0.4009 - 2014-04-03

Do not send chunked body for HEAD requests #87 (therigu)
Added --disable-proctitle option to disable the proctitle change #97

Documentation

Starman launcher

Modules

Plack::Handler::Starman

Plack adapter for Starman

High-performance preforking PSGI/Plack web server

Provides

HTTP::Server::PSGI::Net::Server::PreFork

in lib/HTTP/Server/PSGI/Net/Server/PreFork.pm

Starman::Server

in lib/Starman/Server.pm

Other files

To install Starman, copy and paste the appropriate command in to your terminal.

cpanm Starman

perl -MCPAN -e shell
install Starman

For more information on module installation, please visit the detailed CPAN module installation guide.

	Global
`s`	Focus search bar
`?`	Bring up this help dialog

	GitHub
`g` `p`	Go to pull requests
`g` `i`	Go to GitHub issues (only if GitHub is preferred repository)

	POD
`g` `a`	Go to author
`g` `c`	Go to changes
`g` `i`	Go to issues
`g` `d`	Go to dist
`g` `r`	Go to repository/SCM
`g` `s`	Go to source
`g` `b`	Go to file browse

Search terms
module: (e.g. module:Plugin)
distribution: (e.g. distribution:Dancer auth)
author: (e.g. author:SONGMU Redis)
version: (e.g. version:1.00)