CVE-2026-54388Critical 9.1Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers0.4%
CVE-2026-54387Critical 9.1Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization0.4%
CVE-2026-55202High 8.2Tinyproxy - Stathost Detection Bypass via Host Header Manipulation0.4%
CVE-2026-3945High 7.5tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of Service0.6%
CVE-2023-49606Critical 9.8A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, whi63.1%