Starlet versions from 0.20 up to but not including 0.33 for Perl contain a vulnerability that allows remote attackers to exhaust memory via unbounded buffering when decoding chunked request bodies. The vulnerability arises because the decoder accumulates input in a buffer without limiting the length of chunk-size lines or the data of large chunks, enabling a single request to consume excessive memory.