I found this old posting from March 2021, the validated_host_header cause the same issue already in 5.9.1 (but not in the previous one):
https://openacs.org/forums/message-view?message_id=5513615
Cheers Frank