Vulnerabilities

TI-2026-29342 CVE-2026-40606 · GHSA-527g-3w9m-29hv

ProxyAuth Addon LDAP Injection in mitmproxy

LOW 21

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00166 Published 2026-04-21 Fixed in 12.2.2 CWE-90

TI-2022-08580 CVE-2022-24766 · GHSA-gcx2-gvj7-pxv3

Insufficient Protection against HTTP Request Smuggling in mitmproxy

MEDIUM 52

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01633 Published 2022-03-21 Fixed in 8.0.0 CWE-444

TI-2021-16599 CVE-2021-39214 · GHSA-22gh-3r9q-xf38

Lacking Protection against HTTP Request Smuggling in mitmproxy

MEDIUM 44

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01055 Published 2021-09-16 Fixed in 7.0.3 CWE-444

TI-2018-10406 CVE-2018-14505 · GHSA-6m53-c78q-7qmg

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

MEDIUM 44

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03348 Published 2018-07-22 Fixed in 4.0.4 CWE-20

Vulnerabilities

Filters

ProxyAuth Addon LDAP Injection in mitmproxy

Insufficient Protection against HTTP Request Smuggling in mitmproxy

Lacking Protection against HTTP Request Smuggling in mitmproxy

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.