Threats affecting pkg:cpan/Monoceros

Monoceros versions before 0.30 for Perl contain a vulnerability where a remote attacker can send a request with a large Content-Length header, causing the worker process to exhaust memory and crash. This occurs because the request body is read in a loop that attempts to allocate a buffer equal to the declared Content-Length before any data is received, leading to an uncatchable out-of-memory error. The issue is fixed in version 0.30.