GitHub Advisoryadvisory · PyPI

GHSA-wx63-35hw-2482 HTTP/HTTPS Traffic Interception Bypass in mad-proxy

MEDIUM Published 2025-12-09 Modified 2025-12-10 Official page ↗
Aliases
CVE-2025-67485
Ecosystem
PyPI
Packages
mad-proxy
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-693
Reviewed
2025-12-09

Affected packages

• PyPI mad-proxy: <= 0.3 (no fix yet)

Description

A vulnerability in mad-proxy versions <= 0.3 allows attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic.

Related

Alias · CVE (1)

  • CVE-2025-67485 mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. vulnerability

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References