X41 D-Sec

Security researchers at Secwest and X41 D-Sec discovered CVE-2026-48710, a high-severity authentication bypass vulnerability in the Starlette Python web framework that allows attackers to use malforme…

A single malformed character in a web request can let an unauthenticated attacker bypass access controls in applications built on the Starlette framework, which powers FastAPI, researchers at cybersec…

A critical vulnerability tracked as CVE-2026-48710 (BadHost) in Starlette versions prior to 1.0.1 allows attackers to bypass path-based authentication middleware by injecting a crafted Host header tha…