SpectoLabs hoverfly vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 20262

Newest CVEs

• CVE-2026-50018

  Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

  SpectoLabs · hoverfly

  Medium6.5
• CVE-2026-50013

  Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode

  SpectoLabs · hoverfly

  High7.5
• CVE-2025-54376

  Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.

  SpectoLabs · hoverfly

  High7.8
• CVE-2025-54123

  Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

  SpectoLabs · hoverfly

  Critical9.8
• CVE-2024-45388

  Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)

  SpectoLabs · hoverfly

  High7.5