Tinyproxy vulnerabilities

2 known vulnerabilities in Tinyproxy from Tinyproxy Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Tinyproxy: Inconsistent Interpretation of HTTP Requests

  CVE-2026-31842Apr 7, 2026Tinyproxy Project

  Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is_chunked_transfer function uses strcmp to compare the header value against "chunked", even

• 7.5 High severity

  Tinyproxy: Initialization of a Resource with an Insecure Default

  CVE-2022-40468Sep 19, 2022Tinyproxy ProjectEPSS 2.02%

  Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in process_request() function.