HTTP::Body versions before 1.24_01 for Perl have a vulnerability that allows remote attackers to exhaust memory by sending specially crafted chunked request bodies. The parser buffers chunks in memory until complete, but malformed chunk-size lines or excessively large sizes cause the parser to wait indefinitely and grow the buffer unboundedly.