HO
Product
hoverfly
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 0
Watch
Add hoverfly to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50013 | 7.5 | Sep 11 | Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode Affected: < 1.12.8 |
| CVE-2025-54376 | 7.5 | Sep 10 | Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled. Affected: < 1.12.0 |
| CVE-2024-45388 | 7.5 | Sep 2 | Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) Affected: < 1.10.3 |
Showing 3