CVE-2026-48710

Starlette , a lightweight Python ASGI framework, is vulnerable to a Host header injection that allows bypass of path-based security restrictions. Prior to version 1.0.1 , the HTTP Host request header was not validated before being used to reconstruct request.url, so a malformed header could make ...