diff --git a/pkgs/by-name/ti/tinyproxy/package.nix b/pkgs/by-name/ti/tinyproxy/package.nix
index 2875acff42cc..035c3194b91e 100644
--- a/pkgs/by-name/ti/tinyproxy/package.nix
+++ b/pkgs/by-name/ti/tinyproxy/package.nix
@@ -2,6 +2,7 @@
   lib,
   stdenv,
   fetchFromGitHub,
+  fetchpatch2,
   autoreconfHook,
   perl,
   nixosTests,
@@ -10,15 +11,24 @@
 
 stdenv.mkDerivation (finalAttrs: {
   pname = "tinyproxy";
-  version = "1.11.2";
+  version = "1.11.3";
 
   src = fetchFromGitHub {
-    hash = "sha256-bpr/O723FmW2gb+85aJrwW5/U7R2HwbePTx15i3rpsE=";
+    hash = "sha256-In/ZG50i2jKl0x7yfSs3KHlBdm8NdXtspMJPiv4BW6g=";
     rev = finalAttrs.version;
     repo = "tinyproxy";
     owner = "tinyproxy";
   };
 
+  patches = [
+    # Fix case-sensitive matching of "chunked" (CVE-2026-31842)
+    (fetchpatch2 {
+      name = "fix-chunked-case-sensitivity.patch";
+      url = "https://github.com/tinyproxy/tinyproxy/commit/879bf844abffa0bf5fae6aff0c73179024dd9f98.patch";
+      hash = "sha256-Nav3nXyxdoM/tIvfyPJHEYEjAtrRrJlvkMXzsQCZan4=";
+    })
+  ];
+
   # perl is needed for man page generation.
   nativeBuildInputs = [
     autoreconfHook