spectolabs/hoverfly Security Advisories | GitStock

medium2026-07-14

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

GHSA-42j2-w334-qxw7 · CVE-2026-50018

high2026-07-14

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

GHSA-qrh4-p6v4-mrfg · CVE-2026-50013

high2025-09-10

WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled

GHSA-jxmr-2h4q-rhxp · CVE-2025-54376

critical2025-09-10

Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation

GHSA-r4h8-hfp2-ggmf · CVE-2025-54123

high2024-09-03

Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`)

GHSA-6xx4-x46f-f897 · CVE-2024-45388