Vulnerabilities

TI-2026-36844 CVE-2026-50018 · GHSA-42j2-w334-qxw7

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

MEDIUM 62

Hoverfly is an open source API simulation tool.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00543 Published 2026-09-11 Fixed in 1.12.8 CWE-400

TI-2026-36839 CVE-2026-50013 · GHSA-qrh4-p6v4-mrfg

LOW 39

Hoverfly is an open source API simulation tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2026-09-11 Fixed in 1.12.8 CWE-362

TI-2025-34185 CVE-2025-54376 · GHSA-jxmr-2h4q-rhxp

HIGH 73

Hoverfly is an open source API simulation tool.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00711 Published 2025-09-10 Fixed in 1.12.0 CWE-200

TI-2025-33966 CVE-2025-54123 · GHSA-r4h8-hfp2-ggmf

HIGH 82

Hoverfly is an open source API simulation tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10908 Published 2025-09-10 No fix listed CWE-20

TI-2024-30437 CVE-2024-45388 · GHSA-6xx4-x46f-f897

HIGH 72

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.55574 Published 2024-09-02 Fixed in 1.10.3 CWE-200