SpectoLabs vulnerabilities
5 published CVEs name SpectoLabs among the affected products.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-50018
Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions
SpectoLabs · hoverfly
Medium6.5 - CVE-2026-50013
Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode
SpectoLabs · hoverfly
High7.5 - CVE-2025-54376
Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.
SpectoLabs · hoverfly
High7.8 - CVE-2025-54123
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
SpectoLabs · hoverfly
Critical9.8 - CVE-2024-45388
Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`)
SpectoLabs · hoverfly
High7.5