Possible binding to all interfaces. **Snippet:** ```ALLOWED_HOSTS = env("ALLOWED_HOSTS", default=["localhost", "0.0.0.0", "127.0.0.1"])``` **Issue_Confidence:** MEDIUM **Issue_Severity:** MEDIUM **SecObserve observation:** [http://localhost:3000/#/observations/374/show](http://localhost:3000/#/observations/374/show)