CVE-2026-48710Medium· 6.5▾ Midnight⚠ Exploited in the wildPoC availableStarlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 35.8 · likelihood 14.1 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
1.8%
Federal remediation due Sep 16, 2026
5 GitHub repos · Nuclei ×1
Last analysed / modified upstream
1.8% → 70%
Added to the CISA catalog on Sep 2, 2026. Federal remediation due Sep 16, 2026. View catalog ↗
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on request.url (rather than the raw scope path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the Host header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing request.url and falls back to scope["server"] for malformed values.
starlette >= 0.8.3, < 1.0.1ai_inference_server >= 3.3.0, <= 3.3.5ansible_automation_platform = 2.6ansible_automation_platform = 2.7migration_toolkit_for_applications < 8.2.0openshift_ai >= 3.3, < 3.3.5openshift_ai >= 3.4, < 3.4.2openshift_lightspeedsatellite = 6.17satellite = 6.18satellite = 6.19enterprise_linux_ai = 3.0Upgrade past the affected range:
starlette 1.0.1migration_toolkit_for_applications 8.2.0openshift_ai 3.4.2Affected packages:
starlette < 1.0.1Patched in:
starlette 1.0.1Source: https://osv.dev/vulnerability/GHSA-86qp-5c8j-p5mr
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62727High· 7.5Starlette is a lightweight ASGI framework/toolkit
CVE-2026-48746Critical· 9.1vLLM is an inference and serving engine for large language models (LLMs)
CVE-2026-69243High· 7.0AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
CVE-2026-114137High· 7.4Django REST framework: TokenProxy.delete() reports success and revokes nothing
CVE-2024-14029High· 7.5Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request
CVE-2026-48817Medium· 5.3Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`