Tinyproxy

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Tinyproxy < 1.11.2 - Use After Free in HTTP Connection HeaderCVE-2023-49606Tinyproxy · CVSS 9.8 · 81% likely

   CWE-416

2. Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buf…CVE-2022-40468Tinyproxy Project · 2.0% likely

   CWE-1188

3. tinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of ServiceCVE-2026-3945tinyproxy · CVSS 7.5 · 0.6% likely

   CWE-190

4. Tinyproxy HTTP request parsing desynchronization via case-sensitive Transfer-Encoding handlingCVE-2026-31842Tinyproxy Project · CVSS 7.5 · 0.6% likely

   CWE-444

5. Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length HeadersCVE-2026-54388tinyproxy · CVSS 9.1 · 0.4% likelycovered by CyberSIXT

   CWE-444

6. Tinyproxy - HTTP Request Smuggling via CL/TE DesynchronizationCVE-2026-54387tinyproxy · CVSS 9.1 · 0.4% likelycovered by CyberSIXT

   CWE-444

7. Tinyproxy - Stathost Detection Bypass via Host Header ManipulationCVE-2026-55202tinyproxy · CVSS 8.2 · 0.4% likelycovered by CyberSIXT

   CWE-290

8. Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.CVE-2025-63938Tinyproxy Project · CVSS 6.5 · 0.3% likely

   CWE-190

9. Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix MatchCVE-2026-125371tinyproxy · CVSS 4.8 · 0.3% likely

   CWE-187

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.