github.com/SpectoLabs/hoverfly
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions | github.com/SpectoLabs/hoverfly | Go | Medium | Fix reported | |
| Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode | github.com/SpectoLabs/hoverfly | Go | High | Fix reported | |
| Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation | github.com/SpectoLabs/hoverfly | Go | Critical | No fix reported | |
| WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled | github.com/SpectoLabs/hoverfly | Go | High | Fix reported | |
| Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) | github.com/SpectoLabs/hoverflygithub.com/spectolabs/hoverfly | Go | High | Fix reported |