hippolyzer (>=0.2.0, <=0.6.3), mitm-chrome (0.1.2) +2 more potentially affected by unknown CVE via mitmproxy (6.0.2)

mitmproxy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - hippolyzer =0.2.0, =0.1.6, =0.11.3 - xepor 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

comics-down (0.2.0), http-tools (1.1.0) potentially affected by unknown CVE via mitmproxy (5.0.1)

mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by unknown CVE via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

lyrebird (>=0.10.4, <=0.10.5) potentially affected by unknown CVE via mitmproxy (4.0.3)

mitmproxy PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - lyrebird =0.10.4, =0.10.5 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

mitmproxy-escher (1.0.0), mitmproxy-httpolice (0.7.1) potentially affected by unknown CVE via mitmproxy (3.0.4)

mitmproxy PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher 1.0.0 - mitmproxy-httpolice 0.7.1 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

mitmproxy-escher (>=0.1.2, <=0.1.3), padsniff (>=1.2.0, <=1.2.1) +1 more potentially affected by unknown CVE via mitmproxy (2.0.2)

mitmproxy PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - mitmproxy-escher =0.1.2, =1.2.0, =1.2.1 - pymultitor 2.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

padsniff (1.1.1) potentially affected by unknown CVE via mitmproxy (2.0.1)

mitmproxy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff 1.1.1 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

padsniff (>=0.9.0, <=1.1.0) potentially affected by unknown CVE via mitmproxy (0.18.2)

mitmproxy PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - padsniff =0.9.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

sandroid (2.0.0), ui-automation-tools-mbt (>=1.1.1, <=1.3.1) potentially affected by unknown CVE via mitmproxy (0.17.0)

mitmproxy PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - sandroid 2.0.0 - ui-automation-tools-mbt =1.1.1, =1.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

eavesdropper (>=0.0.1, <=0.0.5), goth (>=0.1.0, <=0.16.0) +3 more potentially affected by unknown CVE via mitmproxy (5.3.0)

mitmproxy PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - eavesdropper =0.0.1, =0.1.0, =0.16.0 - http-tools 2.0.0 - iiintent 0.42.11 - mitm-chrome 0.1.1 Source cves: unknown CVE Source advisory:...

proxydns (>=0.0.2, <=0.0.5), wapiti3 (>=3.2.5, <=3.2.6) potentially affected by unknown CVE via mitmproxy (>=12.0.0, <=12.1.1)

mitmproxy PYPI version =12.0.0, =0.0.2, =3.2.5, =3.2.6 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...

mitmproxy (>=0.18.2, <=0.18.3), padsniff (>=0.9.0, <=1.1.0) potentially affected by CVE-2025-57804 via h2 (2.4.4)

h2 PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - mitmproxy =0.18.2, =0.9.0, =1.1.0 Source cves: CVE-2025-57804 Source advisory: OSV:GHSA-847F-9342-265H...

PT-2025-36701

mitmproxy 12.1.1 and below embed python-hyper/h2 ≤ v4.2.0, which has a gap in its HTTP/2 header validation. This enables request smuggling attacks when mitmproxy is in a configuration where it translates HTTP/2 to HTTP/1. For example, this affects reverse proxies to http:// backends. It does not...

Mozilla: Microsoft `x-apikey` Exposed in Mozilla CI Public Logs

A Microsoft telemetry API key x-apikey was found exposed in publicly accessible Mozilla CI logs. The key appeared in HTTP POST requests sent to Microsoft's telemetry endpoint during automated Firefox testing and was captured via mitmproxy logs. The security impact was considered minimal as the...

Linux Distros Unpatched Vulnerability : CVE-2022-24766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2021-39214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request...

Remote Code Execution (RCE)

mitmproxy is vulnerable to Remote Code Execution RCE. The vulnerability is due to mitmweb's proxy server allowing access to its internal API, allowing an attacker to perform SSRF and potentially escalate to remote code execution...

OPENSUSE-SU-2025:14762-1 python312-mitmproxy-11.1.2-1.1 on GA media

These are all security issues fixed in the python312-mitmproxy-11.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...

SUSE CVE-2025-23217

mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server bound to :8080 by default to access mitmweb's internal...