Skip to content
OpenAdvisories

Package · Go

github.com/SpectoLabs/hoverfly

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-54123 Public exploit EPSS 11%

    Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

    Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization i…