sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2025-23217 via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

padsniff (1.1.1) potentially affected by CVE-2025-23217 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2025-23217 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

clotho (0.1.0) potentially affected by CVE-2025-23217 via mitmproxy (10.2.2)

mitmproxy PYPI version 10.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - clotho 0.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

robotframework-mitmlibrary (0.1.3), wapiti3 (>=3.2.0, <=3.2.3) potentially affected by CVE-2025-23217 via mitmproxy (10.2.3)

mitmproxy PYPI version 10.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - robotframework-mitmlibrary 0.1.3 - wapiti3 =3.2.0, =3.2.3 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

kraken-build (>=0.34.0, <=0.35.3), kraken-wrapper (>=0.33.2, <=0.35.3) +4 more potentially affected by CVE-2025-23217 via mitmproxy (10.4.2)

mitmproxy PYPI version 10.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - kraken-build =0.34.0, =0.33.2, =0.11.0, =0.0.2, =0.0.1, =0.0.3 Source cves: CVE-2025-23217 Source advisory: OSV:GHSA-WG33-5H85-7Q5P...

cloudflyer (>=1.0.2, <=1.0.5), http-tools (5.0.0) +4 more potentially affected by CVE-2025-23217 via mitmproxy (>=11.0.0, <=11.0.2)

mitmproxy PYPI version =11.0.0, =1.0.2, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =0.2.1 Source cves: CVE-2025-23217 Source advisory: SNYK:PYTHON-MITMPROXY-8689799...

cloudflyer (>=1.0.2, <=1.0.5), http-tools (5.0.0) +4 more potentially affected by CVE-2025-23217 via mitmproxy (>=11.0.0, <=11.0.2)

mitmproxy PYPI version =11.0.0, =1.0.2, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =0.2.1 Source cves: CVE-2025-23217 Source advisory: GHSA-WG33-5H85-7Q5P...

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

MITMProxy security vulnerabilities

mitmproxy is an interactive, SSL/TLS-enabled interceptor proxy with a console interface for HTTP/1, HTTP/2, and WebSockets from the mitmproxy open source. A security vulnerability exists in mitmproxy version 11.1.1 and earlier, which stems from a malicious client that can utilize the proxy server...

CVE-2022-24766

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2024-52804 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2024-52804 Source advisory: OSV:GHSA-8W49-H785-MJ3C...

OPENSUSE-SU-2024:12575-1 python310-mitmproxy-9.0.1-1.1 on GA media

These are all security issues fixed in the python310-mitmproxy-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11956-1 python310-mitmproxy-8.0.0-1.1 on GA media

These are all security issues fixed in the python310-mitmproxy-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2024-58384 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2024-58384 Source advisory: OSV:GHSA-W235-7P84-XX57...

edgy-project (>=0.1.12, <=0.1.15), fallixy (0.18.1) +5 more potentially affected by CVE-2024-14029 via tornado (4.4.3)

tornado PYPI version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - edgy-project =0.1.12, =0.18.1, =0.1.2, =0.9.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2024-14029 Source advisory: OSV:GHSA-753J-MPMX-QQ6G...

cloudmesh-client (>=4.5.0, <=4.7.3), django-ca (>=1.5.0, <=1.5.1) +5 more potentially affected by CVE-2023-50782 via cryptography (1.7.2)

cryptography PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - cloudmesh-client =4.5.0, =1.5.0, =0.5.1, =1.0.0, =5.4.0, =2.2.2, =0.7.0, =0.7.3 Source cves: CVE-2023-50782 Source advisory:...

atlassian-jwt-auth (>=2.8.1, <=2.10.0), fallixy (0.18.1) +3 more potentially affected by CVE-2023-50782 via cryptography (1.5.3)

cryptography PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.8.1, =0.18.1, =0.9.0, =1.1.0 - teamvault 0.6.0 Source cves: CVE-2023-50782 Source advisory: OSV:GHSA-3WW4-GG4F-JR7...

atlassian-jwt-auth (>=2.10.1, <=3.0.1), mitmproxy (>=2.0.1, <=2.0.2) +10 more potentially affected by CVE-2023-50782 via cryptography (1.8.2)

cryptography PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth =2.10.1, =2.0.1, =0.1.2, =0.4.0, =0.0.1, =1.3.6, =2.4.6, =1.1.1, =1.4.0, =1.5.0 Source cves: CVE-2023-50782 Source...