Skip to content
OpenAdvisories

Package · PyPI

mitmproxy

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-40606

    ProxyAuth Addon LDAP Injection in mitmproxy

    mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmproxy 12.2.1 and below, the builtin LDAP proxy authentication does not correctly sanitize…

    mitmproxy mitmproxy mitmproxy mitmproxy Debian Ubuntu PyPI
  • Medium —
    GHSA-63cx-g855-hvv4

    mitmproxy binaries embed a vulnerable python-hyper/h2 dependency

    mitmproxy 12.1.1 and below embed python-hyper/h2 ≤ v4.2.0, which has a gap in its HTTP/2 header validation. This enables request smuggling attacks when mitmproxy is in a configuration where it translates HTTP/2 to HTTP/1. For example, this affects reverse pro…

    mitmproxy PyPI