mitmproxy vulnerabilities
CVEs whose affected-version data names the mitmproxy package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
GHSA-63cx-g855-hvv4Mediummitmproxy binaries embed a vulnerable python-hyper/h2 dependency
mitmproxy binaries embed a vulnerable python-hyper/h2 dependency
▾ Sunlitmitmproxy · mitmproxyvia OSV
CVE-2025-23217HighMitmweb API Authentication Bypass Using Proxy Server
Mitmweb API Authentication Bypass Using Proxy Server
▾ Twilightmitmproxy · mitmproxyEPSS 0.83%via OSV
CVE-2021-39214High· 8.1Lacking Protection against HTTP Request Smuggling in mitmproxy
Lacking Protection against HTTP Request Smuggling in mitmproxy
▾ Twilightmitmproxy · mitmproxyEPSS 1.1%via OSV