Skip to content
OpenAdvisories

Package · Go

github.com/SpectoLabs/hoverfly

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-50018

    Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

    Hoverfly is an open source API simulation tool. Prior to version 1.12.8, remote post-serve actions use `http.DefaultClient` without any timeout configuration. When the remote endpoint is unreachable or intentionally slow (accepts TCP connection but never resp…

    SpectoLabs hoverfly github.com/SpectoLabs/hoverfly Go