SP
Vendor
SpectoLabs
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-50018 | HO hoverfly SpectoLabs | 6.5 | Sep 11 | Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions |
| CVE-2026-50013 | HO hoverfly SpectoLabs | 7.5 | Sep 11 | Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode |
| CVE-2025-54376 | HO hoverfly SpectoLabs | 7.5 | Sep 10 | Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled. |
| CVE-2025-54123 | HO hoverfly SpectoLabs | 9.8 | Sep 10 | Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation |
| CVE-2024-45388 | HO hoverfly SpectoLabs | 7.5 | Sep 2 | Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) |