Hoverfly vulnerabilities
Products
- Hoverfly 3
Newest
- hoverfly Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled. 7.8 High
- hoverfly Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation 9.8 Critical
- hoverfly Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) 7.5 High