{"action":"Upgrade mitmproxy to 8.0.0 or later.","affected":[{"fixed":"8.0.0","introduced":"0"}],"component":"mitmproxy","cve_ids":["CVE-2022-24766"],"ecosystem":"PyPI","epss":0.01633,"exploited":false,"fixed_versions":["8.0.0"],"ghsa_id":"GHSA-gcx2-gvj7-pxv3","id":"tcs_01M5KFHDQ3V1HJRG7VHCYYPH1Q","modified_at":"2025-02-22T05:12:43.323943Z","published_at":"2022-03-22T19:22:59Z","references":["https://osv.dev/vulnerability/GHSA-gcx2-gvj7-pxv3","https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-gcx2-gvj7-pxv3","https://nvd.nist.gov/vuln/detail/CVE-2022-24766","https://github.com/mitmproxy/mitmproxy/commit/b06fb6d157087d526bd02e7aadbe37c56865c71b","https://github.com/mitmproxy/mitmproxy","https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2022-170.yaml","https://mitmproxy.org/posts/releases/mitmproxy8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gcx2-gvj7-pxv3","url":"https://osv.dev/vulnerability/GHSA-gcx2-gvj7-pxv3"}],"summary":"Insufficient Protection against HTTP Request Smuggling in mitmproxy"}