build1 publisher
One slash in a Host header moves the path Starlette's middleware checks
CVE-2026-48710 is in CISA's Known Exploited Vulnerabilities catalog, scored 6.5 by Starlette's maintainers and 10.0 by Horizon3.ai once chained with a LiteLLM command injection. Version 1.0.1 is the fix.
Publishers:dev.to
Reality
- Evidence45
- Adoption55
- Hype gap+12
- Incentives65
- Confidence50