TI-2026-35991 CVE-2026-48710 · GHSA-86qp-5c8j-p5mr
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Priority CRITICAL 86KEV
Starlette is a lightweight ASGI framework/toolkit.
RHSA-2026:34532
General availability of the satellite/iop-host-inventory-rhel9 container image
Released 2026-07-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-host-inventory-rhel9
Fixes 2 records
TI-2026-32372 CVE-2026-44431 · GHSA-qccp-gfcp-xxvc
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
Priority LOW 36
urllib3 is an HTTP client library for Python.