before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01694·Published 2021-01-11·Fixed in 2.3.1CWE-697