Skip to content
OpenAdvisories

Package · Go

github.com/SpectoLabs/hoverfly

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-50013

    Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

    Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `responsesDiff` map without any synchronization (no mutex). When multiple proxy requests are processe…

    SpectoLabs hoverfly github.com/SpectoLabs/hoverfly Go
  • High 7.8
    CVE-2025-54376

    Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.

    Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote at…

    SpectoLabs hoverfly github.com/SpectoLabs/hoverfly Go
  • High 7.5
    CVE-2024-45388 EPSS 56%

    Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)

    Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be a…

    SpectoLabs hoverfly github.com/SpectoLabs/hoverfly Go