CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-31842

Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The is_chunked_transfer function uses strcmp to compare the header value against "chunked", even though RFC 7230 specifies that transfer-coding names are case-insensitive.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 44.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 7.8

References

Products affected by CVE-2026-31842

Tinyproxy Project » Tinyproxy » Version: 1.10.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.10.0
Tinyproxy Project » Tinyproxy » Version: 1.11.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.0
Tinyproxy Project » Tinyproxy » Version: 1.11.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.11.1
Tinyproxy Project » Tinyproxy » Version: 1.4.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.0
Tinyproxy Project » Tinyproxy » Version: 1.4.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1
Tinyproxy Project » Tinyproxy » Version: 1.4.1.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1.1
Tinyproxy Project » Tinyproxy » Version: 1.4.1.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1.2
Tinyproxy Project » Tinyproxy » Version: 1.4.1.3

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1.3
Tinyproxy Project » Tinyproxy » Version: 1.4.1.4

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1.4
Tinyproxy Project » Tinyproxy » Version: 1.4.1.5

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.1.5
Tinyproxy Project » Tinyproxy » Version: 1.4.11

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.11
Tinyproxy Project » Tinyproxy » Version: 1.4.12

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.12
Tinyproxy Project » Tinyproxy » Version: 1.4.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.2
Tinyproxy Project » Tinyproxy » Version: 1.4.2.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.2.1
Tinyproxy Project » Tinyproxy » Version: 1.4.2.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.2.2
Tinyproxy Project » Tinyproxy » Version: 1.4.3

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.3
Tinyproxy Project » Tinyproxy » Version: 1.4.4

cpe:2.3:a:tinyproxy_project:tinyproxy:1.4.4
Tinyproxy Project » Tinyproxy » Version: 1.5.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.5.0
Tinyproxy Project » Tinyproxy » Version: 1.5.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.5.1
Tinyproxy Project » Tinyproxy » Version: 1.5.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.5.2
Tinyproxy Project » Tinyproxy » Version: 1.5.3

cpe:2.3:a:tinyproxy_project:tinyproxy:1.5.3
Tinyproxy Project » Tinyproxy » Version: 1.6.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.0
Tinyproxy Project » Tinyproxy » Version: 1.6.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.1
Tinyproxy Project » Tinyproxy » Version: 1.6.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.2
Tinyproxy Project » Tinyproxy » Version: 1.6.3

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.3
Tinyproxy Project » Tinyproxy » Version: 1.6.4

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.4
Tinyproxy Project » Tinyproxy » Version: 1.6.5

cpe:2.3:a:tinyproxy_project:tinyproxy:1.6.5
Tinyproxy Project » Tinyproxy » Version: 1.7.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.7.0
Tinyproxy Project » Tinyproxy » Version: 1.7.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.7.1
Tinyproxy Project » Tinyproxy » Version: 1.8.0

cpe:2.3:a:tinyproxy_project:tinyproxy:1.8.0
Tinyproxy Project » Tinyproxy » Version: 1.8.1

cpe:2.3:a:tinyproxy_project:tinyproxy:1.8.1
Tinyproxy Project » Tinyproxy » Version: 1.8.2

cpe:2.3:a:tinyproxy_project:tinyproxy:1.8.2
Tinyproxy Project » Tinyproxy » Version: 1.8.3

cpe:2.3:a:tinyproxy_project:tinyproxy:1.8.3
Tinyproxy Project » Tinyproxy » Version: 1.8.4

cpe:2.3:a:tinyproxy_project:tinyproxy:1.8.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-31842

Products

Pricing

Contact Us