Starlette

Starlette Host-header flaw could undermine path-based security checks

CVE-2026-48710 matters where application authorization relies on a reconstructed URL path that differs from actual routing.

Security brief · 1 source · 29 Oct 2026