Dear Maintainer,
mitmweb is broken in testing after the recent patch for CVE-2025-23217 backported to 8.1.1:
- handlers not yet existing in 8.1.1 / introduced at later versions
- missing imports 'typing', 'logging', and 'secrets'
lester@bob:~$ mitmweb
Traceback (most recent call last):
File "/usr/bin/mitmweb", line 33, in <module>
sys.exit(load_entry_point('mitmproxy==8.1.1', 'console_scripts', 'mitmweb')())
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/lib/python3/dist-packages/mitmproxy/tools/main.py", line 142, in mitmweb
from mitmproxy.tools import web
File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/__init__.py", line 1, in <module>
from mitmproxy.tools.web import master
File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/master.py", line 14, in <module>
from mitmproxy.tools.web import app, webaddons, static_viewer
File "/usr/lib/python3/dist-packages/mitmproxy/tools/web/app.py", line 689, in <module>
(r"/state(?:\.json)?", State),
^^^^^
NameError: name 'State' is not defined
lester@bob:~$
I am preparing the fix for this issue.