Starlette host-header vulnerability exposes auth bypass risk

A critical CVE in Starlette's host validation lets attackers bypass authentication by manipulating the Host header—a common pitfall in web frameworks. If you're using Starlette for any auth-sensitive work, this is worth reviewing immediately, especially if you rely on host-based routing or checks.