mitmproxy

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

mitmproxy records in CISA KEV

No mitmproxy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mitmproxy 4 records MEDIUM

Records

4 records in Mitmproxy · all components

TI-2022-08580 CVE-2022-24766 · GHSA-gcx2-gvj7-pxv3

Insufficient Protection against HTTP Request Smuggling in mitmproxy

MEDIUM 52

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01633 Published 2022-03-21 Fixed in 8.0.0 CWE-444

TI-2021-16599 CVE-2021-39214 · GHSA-22gh-3r9q-xf38

Lacking Protection against HTTP Request Smuggling in mitmproxy

MEDIUM 44

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01055 Published 2021-09-16 Fixed in 7.0.3 CWE-444

TI-2018-10406 CVE-2018-14505 · GHSA-6m53-c78q-7qmg

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

MEDIUM 44

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03348 Published 2018-07-22 Fixed in 4.0.4 CWE-20

TI-2026-29342 CVE-2026-40606 · GHSA-527g-3w9m-29hv

ProxyAuth Addon LDAP Injection in mitmproxy

LOW 21

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00166 Published 2026-04-21 Fixed in 12.2.2 CWE-90

Open these records in search →

Critical	2
High	2
Medium	1
Low	0
No CVSS	1