HTTP::Body versions before 1.23_01 for Perl contain a vulnerability that allows an attacker to exhaust server memory and temporary file storage by sending a request with an unlimited number of form fields or multipart parts. The urlencoded parser consumes memory proportional to the number of separators, and the multipart parser creates temporary files for each part with a filename, without limiting their quantity.