
Security Advisories for github.com/SpectoLabs/hoverfly in go
High
27 days ago
WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled
go
github.com/SpectoLabs/hoverfly
Critical
28 days ago
Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation
go
github.com/SpectoLabs/hoverfly
High
about 1 year ago
Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`)
go
github.com/spectolabs/hoverfly