Critical DLA-3892-1 2 CVEs

tinyproxy - security update

Published Sep 18, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	tinyproxy	1.10.0-5+deb11u1

Vulnerabilities 2

Critical 9.8

CVE-2023-49606 Public exploit Scanner template EPSS 63%

A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. …

Tinyproxy Project tinyproxy tinyproxy tinyproxy Debian Ubuntu Alpine

May 1, 2024
Unscored —

CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used…

tinyproxy tinyproxy tinyproxy Debian Ubuntu Alpine

Sep 19, 2022