Lucene search

Mitmproxy Security Vulnerabilities

cve

CVE-2018-14505

mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.

8.8CVSS

8.4AI Score

0.002EPSS

2018-07-22 06:29 PM

cve

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of an...

9.8CVSS

9.2AI Score

0.002EPSS

2021-09-16 03:15 PM

cve

CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of an...

9.8CVSS

9.2AI Score

0.002EPSS

2022-03-21 07:15 PM

cve

CVE-2024-38526

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.

7.2CVSS

7AI Score

0.0004EPSS

2024-06-26 12:15 AM