Starlette

Your weight: normal

0.

BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass (badhost.org)

0 points 1 sources 1 minutes ago cluster

A critical severity vulnerability (CVE-2026-48710) was discovered in Starlette <0.1, allowing attackers to forge request URLs and bypass path-based authentication middleware. Thousands of FastAPI and Starlette applications are affected, including AI infrastructure.

ai-infrastructure fastapi security-vulnerability starlette