#badhost — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #badhost, aggregated by home.social.
-
3/3
This is a supply chain story dressed as a CVE. The ecosystem was built too fast. Security assumed it would catch up. It hasn't.
Digital sovereignty without perimeter defence is just security theatre. If you're running MCP servers and you skip the proxy because 'it adds complexity,' you've already lost.
https://haunted.lighthouse.co.im/articles/badhost-mcp-sovereignty/
#BadHost #CVE202648710 #Starlette #FastAPI #MCP #SupplyChain #CyberSecurity #DigitalSovereignty #ShadowIT #Architecture
-
3/3
This is a supply chain story dressed as a CVE. The ecosystem was built too fast. Security assumed it would catch up. It hasn't.
Digital sovereignty without perimeter defence is just security theatre. If you're running MCP servers and you skip the proxy because 'it adds complexity,' you've already lost.
https://haunted.lighthouse.co.im/articles/badhost-mcp-sovereignty/
#BadHost #CVE202648710 #Starlette #FastAPI #MCP #SupplyChain #CyberSecurity #DigitalSovereignty #ShadowIT #Architecture
-
Millions of #AI agents imperiled by critical vulnerability in #OpenSource package
-
Millions of #AI agents imperiled by critical vulnerability in #OpenSource package
-
There's an update for the Starlette issue: We've scanned thousands of hosts for CVE-2026-48710 and found something important: Being behind a proxy or CloudFlare isn't always a protection unlike previously stated!
When a reverse proxy or CDN (including Cloudflare) sits in front of the target and rejects malformed Host headers, the X-Forwarded-Host header can sometimes be used to bypass the protection! If the backend middleware reads X-Forwarded-Host and updates the ASGI scope, the malicious value can reach the ASGI and Starlette. #badhost -
There's an update for the Starlette issue: We've scanned thousands of hosts for CVE-2026-48710 and found something important: Being behind a proxy or CloudFlare isn't always a protection unlike previously stated!
When a reverse proxy or CDN (including Cloudflare) sits in front of the target and rejects malformed Host headers, the X-Forwarded-Host header can sometimes be used to bypass the protection! If the backend middleware reads X-Forwarded-Host and updates the ASGI scope, the malicious value can reach the ASGI and Starlette. #badhost -
BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass
#HackerNews #BadHost #CVE-2026-48710 #Starlette #Security #Vulnerability #Auth #Bypass
-
BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass
#HackerNews #BadHost #CVE-2026-48710 #Starlette #Security #Vulnerability #Auth #Bypass
-
Even after moving to Mastodon, I can't handle Andrea Mitchell on MSNBC. For some reason I keep giving her a chance and within seconds she something to cause me to change the channel.
-
Even after moving to Mastodon, I can't handle Andrea Mitchell on MSNBC. For some reason I keep giving her a chance and within seconds she something to cause me to change the channel.