Starlette vulnerability lets attackers bypass host header validation

A critical flaw in Starlette's host header handling (CVE-2026-48710) allows attackers to bypass authentication checks by manipulating the Host header. If you're running Starlette apps in production, this is worth reviewing immediately—especially if you rely on host-based validation for access control.