Security · Ars Technica ·
Millions of AI agents imperiled by critical vulnerability in open source package
A critical vulnerability called BadHost was found in Starlette, an open source package used by many AI agents. Starlette receives about 325 million weekly downloads, putting a large number of deployments at risk.