PatchFirst · Latest vulnerabilities
Vulnerability published for tinyproxy in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - Fixed failure to reconcile conflicting Content-Length and Transfer-Encoding [boo#1268474, CVE-2026-54387] - Fixed failure to reject requests containing multiple Content-Length headers with differing values [boo#1268475, CVE-2026-54388] - Fixed failure to properly validate the Host header during stathost detection [boo#1268476, CVE-2026-55202]
This update for tinyproxy fixes the following issues: Changes in tinyproxy: - CVE-2026-3945: Fixed denial of service by unauthenticated remote attacker (boo#1261024) - Update to release 1.11.3 * conf: add BasicAuthRealm feature * basic auth: fix error status 401 vs 407 * tinyproxy.conf.5: explain what a site_spec looks like * tinyproxy.conf.5: add an IPv6 example to allow/deny section * reqs: fix integer overflow in port number processing
Check your installed stack and versions against the current vulnerability feeds.