OSTIF

mentions 2 type Organization feed RSS

// recent coverage 2 mentions

14:48

2026-05-27

infoworld.com

ai-tools

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

A single malformed character in a web request can let an unauthenticated attacker bypass access controls in applications built on the Starlette framework, which powers FastAPI, researchers at cybersec…

09:07

2026-05-26

mcp-scan.nemesis.services

ai-infrastructure

BadHost – CVE-2026-48710 Starlette Host-Header Auth Bypass

A critical vulnerability tracked as CVE-2026-48710 (BadHost) in Starlette versions prior to 1.0.1 allows attackers to bypass path-based authentication middleware by injecting a crafted Host header tha…

// co-occurs with top 8 entities

Starlette 2 X41 D-Sec 2 Kludex 2 FastAPI 1 CVE-2026-48710 1 badhost.org 1 Nemesis 1 vLLM 1