Tinyproxy vulnerabilities
6 published CVEs name Tinyproxy among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125371
Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match
tinyproxy · tinyproxy
Medium6.3 - CVE-2026-54388
Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers
tinyproxy · tinyproxy
Critical9.3 - CVE-2026-54387
Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization
tinyproxy · tinyproxy
Critical9.3 - CVE-2026-55202
Tinyproxy - Stathost Detection Bypass via Host Header Manipulation
tinyproxy · tinyproxy
High8.8 - CVE-2026-3945
tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service
tinyproxy · tinyproxy
High8.7 - CVE-2023-49606
A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can…
Tinyproxy · Tinyproxy
Critical9.8