Threats Tagged 'brew-glances-cve-2026-54282'

A vulnerability in mcpm's Starlette component allows an attacker to manipulate the reconstructed request URL's hostname by sending a request path that does not start with a slash. This causes the URL parser to misinterpret the path as part of the authority section, leading to an attacker-controlled hostname in request.url.hostname. This can mislead code that relies on request.url.hostname for security decisions. The issue affects versions where the request path is not validated before URL reconstruction. A patch is available that prevents the path from crossing into the URL authority.

Starlette versions prior to 1.3.0 contain a vulnerability where the HTTP request path is not properly validated before being used to reconstruct the request URL. This flaw allows an attacker to supply a request path that does not start with a slash, causing the URL parser to misinterpret the path as part of the hostname. This can lead to an attacker-controlled hostname in request.url.hostname, potentially misleading security-sensitive logic relying on this value. The vulnerability is addressed by upgrading to a fixed version that correctly validates and reconstructs the URL.