Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: mitmproxy Clear all filters
TI-2026-29342 CVE-2026-40606 · GHSA-527g-3w9m-29hv

ProxyAuth Addon LDAP Injection in mitmproxy

Priority LOW 21

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00166 Published 2026-04-21 Fixed in 12.2.2 CWE-90
TI-2025-17002 CVE-2025-23217 · GHSA-wg33-5h85-7q5p

Mitmweb API Authentication Bypass Using Proxy Server

Priority MEDIUM 45

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00872 Published 2025-02-06 Fixed in 11.1.2 CWE-288