#1146166 mitmproxy: mitmweb is broken

#1146166#5
Date:
2026-08-30 15:35:54 UTC
From:
To:
Dear Maintainer,

mitmweb is broken in testing after the recent patch for CVE-2025-23217 backported to 8.1.1:

- handlers not yet existing in 8.1.1 / introduced at later versions
- missing imports 'typing', 'logging', and 'secrets'

lester@bob:~$ mitmweb
Traceback (most recent call last):
  File "/usr/bin/mitmweb", line 33, in <module>
    sys.exit(load_entry_point('mitmproxy==8.1.1', 'console_scripts', 'mitmweb')())
             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
  File "/usr/lib/python3/dist-packages/mitmproxy/tools/main.py", line 142, in mitmweb
    from mitmproxy.tools import web
  File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/__init__.py", line 1, in <module>
    from mitmproxy.tools.web import master
  File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/master.py", line 14, in <module>
    from mitmproxy.tools.web import app, webaddons, static_viewer
  File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/app.py", line 689, in <module>
    (r"/state(?:\.json)?", State),
                           ^^^^^
NameError: name 'State' is not defined
lester@bob:~$

I am preparing the fix for this issue.

#1146166#10
Date:
2026-08-30 16:31:00 UTC
From:
To:
Hi team,

I pushed the fix to the repo: https://salsa.debian.org/python-team/packages/mitmproxy

Please upload 8.1.1-5.

Thanks!