Still on Starlette 0.27? The upstream fix for CVE-2026-48710 is a major bump, so the CVE sits in your backlog. Aikido publishes a patched build of 0.27.0 instead: same API, one line in your lockfile.