CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization
Security researchers disclosed CVE-2026-48710, dubbed BadHost, an authentication bypass in the Starlette ASGI framework caused by inconsistent parsing of malformed Host headers. The flaw, affecting Starlette versions 0.8…