package

Go/github.com/SpectoLabs/hoverfly

pkg:go/github.com/SpectoLabs/hoverfly

MEDIUM6.5Go

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

Modified: 7/21/2026

HIGH7.5Go

Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`)

Modified: 9/6/2024

HIGHGo

WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled

Modified: 9/24/2025

HIGH7.5Go

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

Modified: 7/21/2026

CRITICAL9.8Go

Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation

Modified: 9/17/2025

—Go

Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

Modified: 3/3/2026

—Go

Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

Modified: 3/3/2026

—Go

WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Modified: 3/3/2026

—Go

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly

Modified: 7/21/2026

—Go

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode in github.com/SpectoLabs/hoverfly

Modified: 7/21/2026