SpectoLabs hoverfly

• CVE-2026-50018 Medium 6.5 Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions 0.5%
• CVE-2026-50013 High 7.5 Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode 0.5%
• CVE-2025-54376 High 7.8 Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled. 0.7%
• CVE-2025-54123 Critical 9.8 Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation 10.9%
• CVE-2024-45388 High 7.5 Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) 55.6%