What’s Vulnerable › Products

tinyproxy vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your tinyproxy version is affected

Latest tinyproxy vulnerabilities

• CVE-2026-55202 — Tinyproxy - Stathost Detection Bypass via Host Header Manipulation (CVSS 8.2)
• CVE-2026-54388 — Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers (CVSS 9.1)
• CVE-2026-54387 — Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization (CVSS 9.1)
• CVE-2026-31842 — Tinyproxy HTTP request parsing desynchronization via case-sensitive Transfer-Encoding handling (CVSS 7.5)
• CVE-2026-3945 — tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service (CVSS 7.5)
• CVE-2025-63938 — (CVSS 6.5)
• CVE-2023-49606 — (CVSS 9.8)
• CVE-2022-40468 — (CVSS 7.5)
• CVE-2017-11747 — (CVSS 5.5)