Critical Security Bypass in Python-Starlette Affects Fedora 43 and 44

A critical security vulnerability, CVE-2026-48710, has been identified in Python-Starlette, affecting Fedora 43 and 44. The flaw allows a security restriction bypass via a malformed HTTP Host header. Systems running these versions are at risk, as the vulnerability could enable unauthorized access. The CVE was published on May 26, 2026, with a proof of concept released earlier on April 1, 2026. Users are urged to apply updates immediately to mitigate potential exploitation. The updates can be installed using the 'dnf' package manager with specific advisory commands provided in the articles. Both Fedora 43 and 44 users should prioritize this patch to secure their systems against potential attacks.

Key Points: • CVE-2026-48710 allows security bypass via malformed HTTP Host header. • Fedora 43 and 44 are both affected, requiring immediate patching. • Updates can be installed using 'dnf' with specific advisory commands.