PyPI/mitmproxy CVE-2025-23217: high 8.2, EPSS 0.87%

Mitmweb API Authentication Bypass Using Proxy Server

Action: Upgrade mitmproxy to 11.1.2 or later.

pip install mitmproxy==11.1.2

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1630
• nvd: CVE-2025-23217
• https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-wg33-5h85-7q5p
• https://github.com/mitmproxy/mitmproxy/commit/fa89055e196d953f11fd241e36ee37858993486a
• https://en.wikipedia.org/wiki/Server-side_request_forgery
• https://github.com/mitmproxy/mitmproxy
• https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md
• https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md#06-february-2025-mitmproxy-1112
• https://pypi.org/project/mitmproxy
• https://github.com/advisories/GHSA-wg33-5h85-7q5p

CVE-2025-23217 · published 2026-07-07T14:34:49.452344Z · modified 2026-07-07T17:47:04.439204966Z · JSON