Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-67485 EUVD-2025-202176GHSA-wx63-35hw-2482PYSEC-2026-1596

HTTP/HTTPS Traffic Interception Bypass in mad-proxy

Published Dec 10, 2025 · Updated Dec 10, 2025 · Assigned by GitHub_M

Description

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.

Affected products

VendorProductAffectedFixed
machphy mad-proxy <= 0.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mad-proxy <= 0.3 — GHSA-wx63-35hw-2482

References