Tinyproxy

Products

ProductCVEsExploitedLatest
Tinyproxy5–Jun 17, 2026

Exploited and recent CVEs

  • CVE-2026-54388 Critical 9.1 Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers 0.4%
  • CVE-2026-54387 Critical 9.1 Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization 0.4%
  • CVE-2026-55202 High 8.2 Tinyproxy - Stathost Detection Bypass via Host Header Manipulation 0.4%
  • CVE-2026-3945 High 7.5 tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service 0.6%
  • CVE-2023-49606 Critical 9.8 A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, whi 63.1%