Vulnerabilities for mitmproxy

First version without a known vulnerability: 12.2.2

Details

• GHSA-527g-3w9m-29hv2026-04-14

  mitmproxy has an LDAP Injection

  Fixed in: 12.2.2

• GHSA-63cx-g855-hvv42025-08-25

  mitmproxy binaries embed a vulnerable python-hyper/h2 dependency

  Fixed in: 12.1.2

• GHSA-wg33-5h85-7q5p2025-02-06

  Mitmweb API Authentication Bypass Using Proxy Server

  Fixed in: 11.1.2

• GHSA-gcx2-gvj7-pxv32022-03-22

  Insufficient Protection against HTTP Request Smuggling in mitmproxy

  Fixed in: 8.0.0, b06fb6d157087d526bd02e7aadbe37c56865c71b

• GHSA-22gh-3r9q-xf382021-09-20

  Lacking Protection against HTTP Request Smuggling in mitmproxy

  Fixed in: 7.0.3

• GHSA-6m53-c78q-7qmg2018-07-31

  Mitmweb in mitmproxy allows DNS Rebinding attacks

  Fixed in: 4.0.4