CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-05-26
Starlette Security Middleware Bypass via Insufficient HTTP Host Header Validation (CVE-2026-48710)
[Affected Scope] All web applications utilizing Starlette ASGI framework prior to version 1.0.1
[Impact] Malformed Host headers can cause a discrepancy between the actual routed path and request.url.path, allowing attackers to bypass URL-based security middleware and access controls
[Mitigation] Immediately upgrade the Starlette package to version 1.0.1 or higher