Tinyproxy Project vulnerabilities
We track 2 vulnerabilities in Tinyproxy Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 7, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Tinyproxy Project vulnerabilities
- 7.5 High severity
Tinyproxy: Inconsistent Interpretation of HTTP Requests
Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is_chunked_transfer function uses strcmp to compare the header value against "chunked", even
- 7.5 High severity
Tinyproxy: Initialization of a Resource with an Insecure Default
Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.