Hoverfly

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 3
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-54376

    Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.

    Last Modified: Sep 24, 2025
    Published: Sep 10, 2025

    CVE-2025-54123

    Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation

    Last Modified: Sep 17, 2025
    Published: Sep 10, 2025

    CVE-2024-45388

    Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)

    Last Modified: Sep 19, 2024
    Published: Sep 02, 2024
    Items Per Page
    Hoverfly Vulnerabilities & Security CVEs | CVE-DB