Skip to content
OpenAdvisories

Package · Debian

mitmproxy

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2025-23217

    Mitmweb API Authentication Bypass Using Proxy Server

    mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server (bound to `*:8080…

    mitmproxy mitmproxy mitmproxy mitmproxy Debian Ubuntu PyPI
  • High 8.1
    CVE-2021-39214 Public exploit

    Lacking Protection against HTTP Request Smuggling in mitmproxy

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/…

    mitmproxy mitmproxy mitmproxy mitmproxy Debian Ubuntu Alpine PyPI
  • High 8.8
    CVE-2018-14505

    Mitmweb in mitmproxy allows DNS Rebinding attacks

    mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

    mitmproxy mitmproxy mitmproxy Debian Ubuntu PyPI