SpectoLabs vulnerabilities
We track 4 vulnerabilities in SpectoLabs products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
Latest SpectoLabs vulnerabilities
- 7.5 High severity
hoverfly: Concurrent Execution using Shared Resource with Improper Synchronization
Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the `AddDiff()` function writes to the shared `responsesDiff` map without any synchronization (no mutex). When multiple proxy requests are processed
- 7.5 High severity
hoverfly: Insertion of Sensitive Information into Log File
Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote att
- 9.8 Critical severity
hoverfly: Improper Neutralization of Special Elements used in an OS Command
Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in
- 7.5 High severity
hoverfly: Improper Limitation of a Pathname to a Restricted Directory
Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be ab