mitmproxy vulnerabilities (PyPI)

6 vulnerabilities.

• mitmproxy PyPI ProxyAuth Addon LDAP Injection in mitmproxy CVE-2026-40606 Fix available 4.8 MediumApril 14, 2026
• mitmproxy PyPI mitmproxy binaries embed a vulnerable python-hyper/h2 dependency GHSA-63cx-g855-hvv4 Fix available 6.9 MediumAugust 25, 2025
• mitmproxy PyPI Mitmweb API Authentication Bypass Using Proxy Server CVE-2025-23217 Fix available 8.2 HighFebruary 6, 2025
• mitmproxy PyPI Insufficient Protection against HTTP Request Smuggling in mitmproxy CVE-2022-24766 Fix available 9.8 CriticalMarch 21, 2022
• mitmproxy PyPI Lacking Protection against HTTP Request Smuggling in mitmproxy CVE-2021-39214 Public exploitFix available 8.1 HighSeptember 16, 2021
• mitmproxy PyPI Mitmweb in mitmproxy allows DNS Rebinding attacks CVE-2018-14505 Fix available 8.8 HighJuly 22, 2018