PyPI: mitmproxy

CVE-2018-14505

Safety vulnerability ID: SFTY-20180722-08734

Safety legacy ID: pyup.io-36352

mitmproxy before 4.0.4 does not protect mitmweb against DNS rebinding.

PyPI

NVD

GHSA

Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Mitmweb in mitmproxy allows DNS Rebinding attacks

Advisory

mitmproxy before 4.0.4 does not protect mitmweb against DNS rebinding.

Affected Package

Affecting mitmproxy package, versions<4.0.4

Also affects

---

How to Fix

Upgrademitmproxyto4.0.4or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20180722-08734/CVE-2018-14505
https://nvd.nist.gov/vuln/detail/CVE-2018-14505
https://github.com/mitmproxy/mitmproxy/issues/3234
https://github.com/mitmproxy/mitmproxy/pull/3243
https://github.com/advisories/GHSA-6m53-c78q-7qmg
https://github.com/mitmproxy/mitmproxy/commit/7f464b89296881f4d9ec032378c4418e832d17e3
https://github.com/pypa/advisory-database/tree/main/vulns/mitmproxy/PYSEC-2018-56.yaml

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more