Back Linuxsecurity

Fedora 43 Python-Starlette Critical Security Bypass CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 5, 2026

[ 1 ] Bug #2481742 - CVE-2026-48710 starlette: Starlette: Security restriction bypass via malformed HTTP Host header

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e0f378428e' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Bypass in Python-Starlette Affects Fedora 43 and 44 A critical security vulnerability, CVE-2026-48710, has been identified in Python-Starlette, affecting Fedora 43 and 44. The flaw allows a security restriction bypass via a malformed HTTP Host header. Systems running these versions are at risk, as the vulnerability could enable unauthorized access. The CVE was published on May 26, 2026, with a proof of concept released earlier on April 1, 2026. Users are urged to apply updates immediately to mitigate potential exploitation. The updates can be installed using the 'dnf' package manager with specific advisory commands provided in the articles. Both Fedora 43 and 44 users should prioritize this patch to secure their systems against potential attacks. 2 sources 72

Extracted Entities

Fedora 43 Python-Starlette Critical Security Bypass CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)