Ecosystem	Package	Version

Vulnerabilities

CVE-2025-63938

CVE-2025-63938

Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.

Published Nov 27, 2025

https://github.com/rayinaw/my-hub/blob/main/CVE-2025-63938/DISCLOSURE.md

CVSS ScoreMedium

6.5

Ecosystem	Package	Version


rpm	tinyproxy	1.11.1-1.el8
rpm	tinyproxy	1.11.1-1.el9
rpm	tinyproxy	1.11.2-1.el8
rpm	tinyproxy	1.11.2-1.el9
rpm	tinyproxy	1.11.2-2.el10_0
rpm	tinyproxy	1.11.2-5.el10_1
rpm	tinyproxy	1.11.2-5.el10_2
rpm	tinyproxy	1.11.2-5.el8
rpm	tinyproxy	1.11.2-5.el9
rpm	tinyproxy	1.6.5-1.el4
rpm	tinyproxy	1.6.5-1.el5
rpm	tinyproxy	1.8.3-1.el6
rpm	tinyproxy	1.8.3-2.el7
rpm	tinyproxy	1.8.4-2.el7
rpm	tinyproxy-debuginfo	1.11.1-1.el8
rpm	tinyproxy-debuginfo	1.11.1-1.el9
rpm	tinyproxy-debuginfo	1.11.2-1.el8
rpm	tinyproxy-debuginfo	1.11.2-1.el9
rpm	tinyproxy-debuginfo	1.11.2-2.el10_0
rpm	tinyproxy-debuginfo	1.11.2-5.el10_1
rpm	tinyproxy-debuginfo	1.11.2-5.el10_2
rpm	tinyproxy-debuginfo	1.11.2-5.el8
rpm	tinyproxy-debuginfo	1.11.2-5.el9
rpm	tinyproxy-debuginfo	1.6.5-1.el4
rpm	tinyproxy-debuginfo	1.6.5-1.el5
rpm	tinyproxy-debuginfo	1.8.3-1.el6
rpm	tinyproxy-debuginfo	1.8.3-2.el7
rpm	tinyproxy-debuginfo	1.8.4-2.el7
rpm	tinyproxy-debugsource	1.11.1-1.el8
rpm	tinyproxy-debugsource	1.11.1-1.el9
rpm	tinyproxy-debugsource	1.11.2-1.el8
rpm	tinyproxy-debugsource	1.11.2-1.el9
rpm	tinyproxy-debugsource	1.11.2-2.el10_0
rpm	tinyproxy-debugsource	1.11.2-5.el10_1
rpm	tinyproxy-debugsource	1.11.2-5.el10_2
rpm	tinyproxy-debugsource	1.11.2-5.el8
rpm	tinyproxy-debugsource	1.11.2-5.el9

CVE-2025-63938 | Components Impacted | Sonatype Guide | Sonatype Guide