https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2012-3505.htmlhttps://patchthecve.com/cve/CVE-2012-3505.htmlTue, 16 Jun 2026 23:43:22 +0000MEDIUM 5.0: Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger hash collisions predictably. bucket.https://patchthecve.com/cve/CVE-2011-1843.htmlhttps://patchthecve.com/cve/CVE-2011-1843.htmlTue, 16 Jun 2026 23:30:13 +0000MEDIUM 6.8: Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers.https://patchthecve.com/cve/CVE-2011-1499.htmlhttps://patchthecve.com/cve/CVE-2011-1499.htmlTue, 16 Jun 2026 23:29:30 +0000LOW 2.6: acl.c in Tinyproxy before 1.8.3, when an Allow configuration setting specifies a CIDR block, permits TCP connections from all IP addresses, which makes it easier for remote attackers to hide the origin of web traffic by leveraging the open HTTP proxy server.