CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48710

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.9%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-48710

Encode » Starlette » Version: 0.10.0

cpe:2.3:a:encode:starlette:0.10.0
Encode » Starlette » Version: 0.10.1

cpe:2.3:a:encode:starlette:0.10.1
Encode » Starlette » Version: 0.10.2

cpe:2.3:a:encode:starlette:0.10.2
Encode » Starlette » Version: 0.10.3

cpe:2.3:a:encode:starlette:0.10.3
Encode » Starlette » Version: 0.10.4

cpe:2.3:a:encode:starlette:0.10.4
Encode » Starlette » Version: 0.10.6

cpe:2.3:a:encode:starlette:0.10.6
Encode » Starlette » Version: 0.10.7

cpe:2.3:a:encode:starlette:0.10.7
Encode » Starlette » Version: 0.11.1

cpe:2.3:a:encode:starlette:0.11.1
Encode » Starlette » Version: 0.11.2

cpe:2.3:a:encode:starlette:0.11.2
Encode » Starlette » Version: 0.11.3

cpe:2.3:a:encode:starlette:0.11.3
Encode » Starlette » Version: 0.11.4

cpe:2.3:a:encode:starlette:0.11.4
Encode » Starlette » Version: 0.12.0

cpe:2.3:a:encode:starlette:0.12.0
Encode » Starlette » Version: 0.12.11

cpe:2.3:a:encode:starlette:0.12.11
Encode » Starlette » Version: 0.12.12

cpe:2.3:a:encode:starlette:0.12.12
Encode » Starlette » Version: 0.12.13

cpe:2.3:a:encode:starlette:0.12.13
Encode » Starlette » Version: 0.12.2

cpe:2.3:a:encode:starlette:0.12.2
Encode » Starlette » Version: 0.12.3

cpe:2.3:a:encode:starlette:0.12.3
Encode » Starlette » Version: 0.12.4

cpe:2.3:a:encode:starlette:0.12.4
Encode » Starlette » Version: 0.12.5

cpe:2.3:a:encode:starlette:0.12.5
Encode » Starlette » Version: 0.12.6

cpe:2.3:a:encode:starlette:0.12.6
Encode » Starlette » Version: 0.12.7

cpe:2.3:a:encode:starlette:0.12.7
Encode » Starlette » Version: 0.12.8

cpe:2.3:a:encode:starlette:0.12.8
Encode » Starlette » Version: 0.12.9

cpe:2.3:a:encode:starlette:0.12.9
Encode » Starlette » Version: 0.13.0

cpe:2.3:a:encode:starlette:0.13.0
Encode » Starlette » Version: 0.13.1

cpe:2.3:a:encode:starlette:0.13.1
Encode » Starlette » Version: 0.13.2

cpe:2.3:a:encode:starlette:0.13.2
Encode » Starlette » Version: 0.13.3

cpe:2.3:a:encode:starlette:0.13.3
Encode » Starlette » Version: 0.13.4

cpe:2.3:a:encode:starlette:0.13.4
Encode » Starlette » Version: 0.13.5

cpe:2.3:a:encode:starlette:0.13.5
Encode » Starlette » Version: 0.13.6

cpe:2.3:a:encode:starlette:0.13.6
Encode » Starlette » Version: 0.13.7

cpe:2.3:a:encode:starlette:0.13.7
Encode » Starlette » Version: 0.13.8

cpe:2.3:a:encode:starlette:0.13.8
Encode » Starlette » Version: 0.14.0

cpe:2.3:a:encode:starlette:0.14.0
Encode » Starlette » Version: 0.14.1

cpe:2.3:a:encode:starlette:0.14.1
Encode » Starlette » Version: 0.14.2

cpe:2.3:a:encode:starlette:0.14.2
Encode » Starlette » Version: 0.15.0

cpe:2.3:a:encode:starlette:0.15.0
Encode » Starlette » Version: 0.16.0

cpe:2.3:a:encode:starlette:0.16.0
Encode » Starlette » Version: 0.17.0

cpe:2.3:a:encode:starlette:0.17.0
Encode » Starlette » Version: 0.17.1

cpe:2.3:a:encode:starlette:0.17.1
Encode » Starlette » Version: 0.18.0

cpe:2.3:a:encode:starlette:0.18.0
Encode » Starlette » Version: 0.19.0

cpe:2.3:a:encode:starlette:0.19.0
Encode » Starlette » Version: 0.19.1

cpe:2.3:a:encode:starlette:0.19.1
Encode » Starlette » Version: 0.20.0

cpe:2.3:a:encode:starlette:0.20.0
Encode » Starlette » Version: 0.20.1

cpe:2.3:a:encode:starlette:0.20.1
Encode » Starlette » Version: 0.20.2

cpe:2.3:a:encode:starlette:0.20.2
Encode » Starlette » Version: 0.20.3

cpe:2.3:a:encode:starlette:0.20.3
Encode » Starlette » Version: 0.20.4

cpe:2.3:a:encode:starlette:0.20.4
Encode » Starlette » Version: 0.21.0

cpe:2.3:a:encode:starlette:0.21.0
Encode » Starlette » Version: 0.22.0

cpe:2.3:a:encode:starlette:0.22.0
Encode » Starlette » Version: 0.23.0

cpe:2.3:a:encode:starlette:0.23.0
Encode » Starlette » Version: 0.23.1

cpe:2.3:a:encode:starlette:0.23.1
Encode » Starlette » Version: 0.24.0

cpe:2.3:a:encode:starlette:0.24.0
Encode » Starlette » Version: 0.25.0

cpe:2.3:a:encode:starlette:0.25.0
Encode » Starlette » Version: 0.26.0

cpe:2.3:a:encode:starlette:0.26.0
Encode » Starlette » Version: 0.26.1

cpe:2.3:a:encode:starlette:0.26.1
Encode » Starlette » Version: 0.27.0

cpe:2.3:a:encode:starlette:0.27.0
Encode » Starlette » Version: 0.28.0

cpe:2.3:a:encode:starlette:0.28.0
Encode » Starlette » Version: 0.29.0

cpe:2.3:a:encode:starlette:0.29.0
Encode » Starlette » Version: 0.30.0

cpe:2.3:a:encode:starlette:0.30.0
Encode » Starlette » Version: 0.31.0

cpe:2.3:a:encode:starlette:0.31.0
Encode » Starlette » Version: 0.31.1

cpe:2.3:a:encode:starlette:0.31.1
Encode » Starlette » Version: 0.32.0

cpe:2.3:a:encode:starlette:0.32.0
Encode » Starlette » Version: 0.33.0

cpe:2.3:a:encode:starlette:0.33.0
Encode » Starlette » Version: 0.34.0

cpe:2.3:a:encode:starlette:0.34.0
Encode » Starlette » Version: 0.35.0

cpe:2.3:a:encode:starlette:0.35.0
Encode » Starlette » Version: 0.35.1

cpe:2.3:a:encode:starlette:0.35.1
Encode » Starlette » Version: 0.36.0

cpe:2.3:a:encode:starlette:0.36.0
Encode » Starlette » Version: 0.36.1

cpe:2.3:a:encode:starlette:0.36.1
Encode » Starlette » Version: 0.36.2

cpe:2.3:a:encode:starlette:0.36.2
Encode » Starlette » Version: 0.36.3

cpe:2.3:a:encode:starlette:0.36.3
Encode » Starlette » Version: 0.37.0

cpe:2.3:a:encode:starlette:0.37.0
Encode » Starlette » Version: 0.37.1

cpe:2.3:a:encode:starlette:0.37.1
Encode » Starlette » Version: 0.37.2

cpe:2.3:a:encode:starlette:0.37.2
Encode » Starlette » Version: 0.38.0

cpe:2.3:a:encode:starlette:0.38.0
Encode » Starlette » Version: 0.38.1

cpe:2.3:a:encode:starlette:0.38.1
Encode » Starlette » Version: 0.38.2

cpe:2.3:a:encode:starlette:0.38.2
Encode » Starlette » Version: 0.38.3

cpe:2.3:a:encode:starlette:0.38.3
Encode » Starlette » Version: 0.38.4

cpe:2.3:a:encode:starlette:0.38.4
Encode » Starlette » Version: 0.38.5

cpe:2.3:a:encode:starlette:0.38.5
Encode » Starlette » Version: 0.38.6

cpe:2.3:a:encode:starlette:0.38.6
Encode » Starlette » Version: 0.39.0

cpe:2.3:a:encode:starlette:0.39.0
Encode » Starlette » Version: 0.39.1

cpe:2.3:a:encode:starlette:0.39.1
Encode » Starlette » Version: 0.39.2

cpe:2.3:a:encode:starlette:0.39.2
Encode » Starlette » Version: 0.40.0

cpe:2.3:a:encode:starlette:0.40.0
Encode » Starlette » Version: 0.41.0

cpe:2.3:a:encode:starlette:0.41.0
Encode » Starlette » Version: 0.41.1

cpe:2.3:a:encode:starlette:0.41.1
Encode » Starlette » Version: 0.41.2

cpe:2.3:a:encode:starlette:0.41.2
Encode » Starlette » Version: 0.8.3

cpe:2.3:a:encode:starlette:0.8.3
Encode » Starlette » Version: 0.8.4

cpe:2.3:a:encode:starlette:0.8.4
Encode » Starlette » Version: 0.8.5

cpe:2.3:a:encode:starlette:0.8.5
Encode » Starlette » Version: 0.8.6

cpe:2.3:a:encode:starlette:0.8.6
Encode » Starlette » Version: 0.8.7

cpe:2.3:a:encode:starlette:0.8.7
Encode » Starlette » Version: 0.8.8

cpe:2.3:a:encode:starlette:0.8.8
Encode » Starlette » Version: 0.9.0

cpe:2.3:a:encode:starlette:0.9.0
Encode » Starlette » Version: 0.9.1

cpe:2.3:a:encode:starlette:0.9.1
Encode » Starlette » Version: 0.9.10

cpe:2.3:a:encode:starlette:0.9.10
Encode » Starlette » Version: 0.9.11

cpe:2.3:a:encode:starlette:0.9.11
Encode » Starlette » Version: 0.9.2

cpe:2.3:a:encode:starlette:0.9.2
Encode » Starlette » Version: 0.9.3

cpe:2.3:a:encode:starlette:0.9.3
Encode » Starlette » Version: 0.9.4

cpe:2.3:a:encode:starlette:0.9.4
Encode » Starlette » Version: 0.9.5

cpe:2.3:a:encode:starlette:0.9.5
Encode » Starlette » Version: 0.9.6

cpe:2.3:a:encode:starlette:0.9.6
Encode » Starlette » Version: 0.9.7

cpe:2.3:a:encode:starlette:0.9.7
Encode » Starlette » Version: 0.9.8

cpe:2.3:a:encode:starlette:0.9.8
Encode » Starlette » Version: 0.9.9

cpe:2.3:a:encode:starlette:0.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48710

Products

Pricing

Contact Us