Tag archive
Technical analysis of CVE-2026-48710 (BadHost), a Host header parsing flaw in Starlette that lets attackers bypass path-based authorization, including affected versions, the LiteLLM exploitation chain and remediation steps.
Technical analysis of CVE-2026-48710 (BadHost), a Host header parsing flaw in Starlette that lets attackers bypass path-based authorization, including affected versions, the LiteLLM exploitation chain and remediation steps.
Why a Medium-scored Starlette flaw matters across the AI stack: CVE-2026-48710 affected versions, the LiteLLM RCE chain, ZoomEye exposure data and hardening steps for FastAPI, vLLM and MCP gateways.
Discover why modern engineers prefer FastAPI over Django for building high-performance Python backends in 2026. Real benchmarks, code, and 5-step tutorial.
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.
The problem with existing routing examples This is Part 2 of the Shiny for Python: The...
Photo by Kaue Barbier: https://www.pexels.com/photo/28182837/ Your First Raw ASGI App (No...
Choosing the right API framework can make or break your project's performance. If speed is your...
Before Uvicorn and Starlette: How Did Synchronous Servers Work? In traditional web...
When working with FastAPI, especially in larger projects, using one instance of your FastAPI app and...
Fast HTML - 500 Server Error NotFoundError: Need 2 pk In case anybody runs into this issue...
This post lives in: Linkedin github.com/ceb10n ceb10n.medium.com We've seen in the last post that...