A developer built an MCP server at mcp.decile.com using Ember.js for the embedded MCP Apps, alongside a backend stack including Kubernetes, Starlette, Django REST Framework, and nginx. The project hig…
Security researchers at Secwest and X41 D-Sec discovered CVE-2026-48710, a high-severity authentication bypass vulnerability in the Starlette Python web framework that allows attackers to use malforme…
An engineer built a documentation Q&A engine that returns `null` instead of hallucinating answers when a query has no match in the corpus. The Knowledge Base API uses BM25 retrieval with POS-aware lem…
A critical vulnerability tracked as CVE-2026-48710 and nicknamed "BadHost" was disclosed in the Starlette ASGI framework, affecting all versions prior to 1.0.1. The flaw allows attackers to manipulate…
A new open-source Python framework, mcp-authflow, provides an OAuth 2.0 authorization server for Model Context Protocol (MCP) servers, enabling token issuance and management to protect MCP tool access…
A single-character bug in the Starlette open-source framework, tracked as CVE-2026-48710 and nicknamed BadHost, allowed attackers to bypass authentication on millions of servers running AI agents and …
A single malformed character in a web request can let an unauthenticated attacker bypass access controls in applications built on the Starlette framework, which powers FastAPI, researchers at cybersec…
A critical vulnerability in the open source Starlette framework, tracked as CVE-2026-48710 and named BadHost, exposes millions of AI agents and tools to potential data theft and credential compromise.…
A critical vulnerability tracked as CVE-2026-48710 (BadHost) in Starlette versions prior to 1.0.1 allows attackers to bypass path-based authentication middleware by injecting a crafted Host header tha…