HTTP::Body versions before 1.23_01 for Perl improperly handle mixed-case percent escapes in urlencoded form fields by dropping them instead of decoding. This causes inputs like 'pass%aBword' to be interpreted differently by the application than by conforming decoders, potentially leading to inconsistent data processing.