One Character in an HTTP Header Just Bypassed Authentication on 325 Million Servers

325 million downloads per week. That’s how many times developers pull Starlette from PyPI. [1]