HTTP::Body versions before 1.23_01 for Perl contain a vulnerability where parsing chunked request bodies can lead to CPU exhaustion due to quadratic regex backtracking. This occurs when the add() function matches chunk-size lines with a regex that can backtrack excessively on lines of hex digits without a preceding CR before LF. A remote attacker can exploit this by sending specially crafted chunked requests to cause high CPU usage.