TI-2022-08580 CVE-2022-24766 · GHSA-gcx2-gvj7-pxv3
Insufficient Protection against HTTP Request Smuggling in mitmproxy
Priority MEDIUM 52
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.
mitmproxy
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
mitmproxy records in CISA KEVNo mitmproxy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2025-17002 CVE-2025-23217 · GHSA-wg33-5h85-7q5p
Mitmweb API Authentication Bypass Using Proxy Server
Priority MEDIUM 45
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.
TI-2021-16599 CVE-2021-39214 · GHSA-22gh-3r9q-xf38
Lacking Protection against HTTP Request Smuggling in mitmproxy
Priority MEDIUM 44
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.
TI-2018-10406 CVE-2018-14505 · GHSA-6m53-c78q-7qmg
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
Priority MEDIUM 44
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
TI-2024-25761 CVE-2024-38526 · GHSA-5vgj-ggm4-fg62
pdoc embeds link to malicious CDN if math mode is enabled
Priority MEDIUM 42
pdoc provides API Documentation for Python Projects.
TI-2026-29342 CVE-2026-40606 · GHSA-527g-3w9m-29hv
ProxyAuth Addon LDAP Injection in mitmproxy
Priority LOW 21
mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.