lyrebird (>=0.10.4, <=0.10.5) potentially affected by CVE-2021-39214 via mitmproxy (4.0.3)

mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2021-39214 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2021-39214 via mitmproxy (5.0.1)

mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

eavesdropper (>=0.0.1, <=0.0.5), goth (>=0.1.0, <=0.16.0) +3 more potentially affected by CVE-2021-39214 via mitmproxy (5.3.0)

mitmproxy PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - eavesdropper =0.0.1, =0.1.0, =0.16.0 - http-tools 2.0.0 - iiintent 0.42.11 - mitm-chrome 0.1.1 Source cves: CVE-2021-39214 Source advisory:...

hippolyzer (>=0.2.0, <=0.6.3), mitm-chrome (0.1.2) +2 more potentially affected by CVE-2021-39214 via mitmproxy (6.0.2)

mitmproxy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - hippolyzer =0.2.0, =0.1.6, =0.11.3 - xepor 0.1.0 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by CVE-2021-39214 via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2021-39214 via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

padsniff (1.1.1) potentially affected by CVE-2021-39214 via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by CVE-2021-39214 via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: CVE-2021-39214 Source advisory: OSV:PYSEC-2021-328...

Design/Logic Flaw

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

UBUNTU-CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

PYSEC-2021-328

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

comics-down (0.2.0), eavesdropper (>=0.0.1, <=0.0.5) +16 more potentially affected by CVE-2021-39214 via mitmproxy (>=0.17.0, <=6.0.2)

mitmproxy PYPI version =0.17.0, =0.0.1, =0.1.0, =0.2.0, =1.0.1, =0.10.4, =0.1.1, =0.1.2, =1.2.1, =0.9.0, =1.5.33, =1.5.41 - pymultitor 2.1.0 - sandroid 2.0.0 and more Source cves: CVE-2021-39214 Source advisory: MEND:CVE-2021-39214...

CVE-2021-39214 Lacking Protection against HTTP Request Smuggling in mitmproxy

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

CVE-2021-39214

CVE-2021-39214 affects mitmproxy: in versions 7.0.2 and earlier, a malicious client or server can perform HTTP request smuggling through mitmproxy, causing the smuggled request/response to be embedded in another HTTP message body and bypass standard event hooks and local checks. Reported impact i...

CVE-2021-39214

mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...

PT-2021-22466 · Mitmproxy +1 · Mitmproxy +1

Name of the Vulnerable Software and Affected Versions: mitmproxy versions 7.0.2 and below Description: A malicious client or server can perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of...