CVE-2026-31842 | Tinyproxy up to 1.11.3 HTTP Request src/reqs.c is_chunked_transfer request smuggling

A vulnerability, which was classified as critical, was found in Tinyproxy up to 1.11.3. Affected is the function is_chunked_transfer of the file src/reqs.c of the component HTTP Request Handler. The manipulation results in http request smuggling.

This vulnerability was named CVE-2026-31842. The attack may be performed from remote. There is no available exploit.