hoverfly

Sep 10, 2025 GO-2025-3944

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

Jun 18, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 21, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 22, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 13, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 3, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 21, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 2, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 21, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 20, 2025 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Dec 23, 2024 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Dec 10, 2024 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Dec 1, 2024 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 5, 2024 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 28, 2024 GO-2025-3944 +1 more

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 20, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 17, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 11, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 31, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 20, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 12, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 6, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Apr 27, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Apr 20, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 11, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 26, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 13, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 7, 2024 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Nov 28, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 12, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 22, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 18, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 5, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 25, 2023 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Nov 2, 2022 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 22, 2022 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 27, 2022 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 8, 2022 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 23, 2022 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 18, 2021 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 1, 2021 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 5, 2020 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 26, 2020 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 10, 2020 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 29, 2020 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 3, 2020 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Oct 10, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 25, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 22, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 3, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 20, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Apr 30, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 15, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 18, 2019 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Oct 24, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Oct 9, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 11, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 23, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 8, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 9, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 27, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 4, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 19, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 8, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 5, 2018 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 29, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 25, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 15, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 12, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 5, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 23, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 16, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 9, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jun 2, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 19, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 10, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Apr 27, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Apr 18, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 27, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 24, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 23, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Feb 15, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 19, 2017 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Dec 2, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Nov 28, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Nov 11, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Sep 8, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 26, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Aug 3, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 20, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jul 15, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 20, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

May 9, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const HoverflyAdminPasswordEV

+ const HoverflyAdminUsernameEV

+ const HoverflyImportRecordsEV

+ const SimulateMode

Apr 1, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const DefaultDatabasePath

+ const HoverflyTLSVerification

type Configuration

+ DatabasePath string

+ TLSVerification bool

+ type Hoverfly struct

+ Authentication backends.AuthBackend

+ Cfg *Configuration

+ Counter *metrics.CounterByMode

+ HTTP *http.Client

+ Hooks ActionTypeHooks

+ MIN *minify.M

+ MetadataCache cache.Cache

+ Proxy *goproxy.ProxyHttpServer

+ RequestCache cache.Cache

+ SL *StoppableListener

+ func (d *Hoverfly) AddHook(hook Hook)

+ func (d *Hoverfly) AllMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) AllRecordsHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) CurrentStateHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) DeleteAllRecordsHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) DeleteMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) Import(uri string) error

+ func (d *Hoverfly) ImportFromDisk(path string) error

+ func (d *Hoverfly) ImportFromURL(url string) error

+ func (d *Hoverfly) ImportPayloads(payloads []Payload) error

+ func (d *Hoverfly) ImportRecordsHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) ManualAddHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) RecordsCount(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) SetMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) StartAdminInterface()

+ func (d *Hoverfly) StartProxy() error

+ func (d *Hoverfly) StateHandler(w http.ResponseWriter, r *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) StatsHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *Hoverfly) StatsWSHandler(w http.ResponseWriter, r *http.Request)

+ func (d *Hoverfly) StopProxy()

+ func (d *Hoverfly) UpdateDestination(destination string) (err error)

+ func (d *Hoverfly) UpdateProxy()

Mar 21, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ func GetNewMinifiers() *minify.M

type Cache

+ Delete func(key []byte) error

+ GetAllEntries func() (map[string][]byte, error)

+ GetAllValues func() ([][]byte, error)

type Configuration

+ ProxyControlWG sync.WaitGroup

type DBClient

+ MIN *minify.M

+ Proxy *goproxy.ProxyHttpServer

+ SL *StoppableListener

+ func (d *DBClient) StartProxy() error

+ func (d *DBClient) StopProxy()

+ func (d *DBClient) UpdateDestination(destination string) (err error)

+ func (d *DBClient) UpdateProxy()

+ type Meta struct

+ DS Cache

+ func NewMetadata(cache Cache) *Meta

+ func (m *Meta) CloseDB()

+ func (m *Meta) Delete(key string) error

+ func (m *Meta) DeleteData() error

+ func (m *Meta) Get(key string) (value string, err error)

+ func (m *Meta) GetAll() (map[string]string, error)

+ func (m *Meta) Set(key, value string) error

type RequestContainer

+ Minifier *minify.M

+ type StoppableListener struct

+ func NewStoppableListener(l net.Listener) (*StoppableListener, error)

+ func (sl *StoppableListener) Accept() (net.Conn, error)

+ func (sl *StoppableListener) Stop()

Mar 10, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Mar 7, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const MetadataBucketName

+ type BoltMeta struct

+ DS *bolt.DB

+ MetadataBucket []byte

+ func NewBoltDBMetadata(db *bolt.DB, bucket []byte) *BoltMeta

+ func (m *BoltMeta) CloseDB()

+ func (m *BoltMeta) Delete(key []byte) error

+ func (m *BoltMeta) DeleteData() error

+ func (m *BoltMeta) Get(key []byte) (value []byte, err error)

+ func (m *BoltMeta) GetAll() (objects []MetaObject, err error)

+ func (m *BoltMeta) Set(key, value []byte) error

type DBClient

+ MD Metadata

+ func (d *DBClient) AllMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *DBClient) DeleteMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ func (d *DBClient) SetMetadataHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

+ type MetaObject struct

+ Key string

+ Value string

+ type Metadata interface

+ CloseDB func()

+ Delete func(key []byte) error

+ DeleteData func() error

+ Get func(key []byte) ([]byte, error)

+ GetAll func() ([]MetaObject, error)

+ Set func(key, value []byte) error

Mar 4, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const DefaultJWTExpirationDelta

+ const HoverflyAdminPortEV

+ const HoverflyAuthEnabledEV

+ const HoverflyDBEV

+ const HoverflyMiddlewareEV

+ const HoverflyProxyPortEV

+ const HoverflySecretEV

+ const HoverflyTokenExpirationEV

+ const URL

type Configuration

+ AuthEnabled bool

+ JWTExpirationDelta int

+ SecretKey []byte

type DBClient

+ AB backends.AuthBackend

+ func (d *DBClient) Import(uri string) error

+ func (d *DBClient) ImportFromDisk(path string) error

+ func (d *DBClient) ImportFromURL(url string) error

+ func (d *DBClient) ImportPayloads(payloads []Payload) error

+ func (d *DBClient) ManualAddHandler(w http.ResponseWriter, req *http.Request, next http.HandlerFunc)

Feb 12, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const ActionTypeConfigurationChanged

+ const ActionTypeRequestCaptured

+ const ActionTypeWipeDB

+ type ActionType string

+ type ActionTypeHooks map[ActionType][]Hook

+ func (hooks ActionTypeHooks) Add(hook Hook)

+ func (hooks ActionTypeHooks) Fire(ac ActionType, entry *Entry) error

+ type BoltCache struct

+ DS *bolt.DB

+ RequestsBucket []byte

+ func NewBoltDBCache(db *bolt.DB, bucket []byte) *BoltCache

+ func (c *BoltCache) CloseDB()

+ func (c *BoltCache) DeleteBucket(name []byte) (err error)

+ func (c *BoltCache) DeleteData() error

+ func (c *BoltCache) Get(key []byte) (value []byte, err error)

+ func (c *BoltCache) GetAllKeys() (keys map[string]bool, err error)

+ func (c *BoltCache) GetAllRequests() (payloads []Payload, err error)

+ func (c *BoltCache) RecordsCount() (count int, err error)

+ func (c *BoltCache) Set(key, value []byte) error

type Cache

+ CloseDB func()

+ DeleteData func() error

type DBClient

+ Hooks ActionTypeHooks

+ func (d *DBClient) AddHook(hook Hook)

+ type Entry struct

+ ActionType ActionType

+ Data []byte

+ Message string

+ Time time.Time

+ type Hook interface

+ ActionTypes func() []ActionType

+ Fire func(*Entry) error

Feb 8, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const RequestsBucketName

+ func GetDB(name string) *bolt.DB

+ func SynthesizeResponse(req *http.Request, middleware string) (*http.Response, error)

type Cache

+ DS *bolt.DB

+ RequestsBucket []byte

+ func (c *Cache) GetAllKeys() (keys []string, err error)

type Configuration

+ AdminPort string

+ DatabaseName string

+ Destination string

+ Development bool

+ Middleware string

+ Mode string

+ ProxyPort string

+ Verbose bool

type Constructor

+ func (c *Constructor) ReconstructRequest() (*http.Request, error)

+ func (c *Constructor) ReconstructResponse() *http.Response

type DBClient

+ Cache Cache

+ Cfg *Configuration

+ Counter *CounterByMode

+ HTTP *http.Client

+ func GetNewHoverfly(cfg *Configuration) (*goproxy.ProxyHttpServer, DBClient)

+ func (d *DBClient) StartAdminInterface()

type Payload

+ func (p *Payload) Encode() ([]byte, error)

+ type RequestContainer struct

+ Details RequestDetails

+ func (r *RequestContainer) Hash() string

+ type RequestDetails struct

+ Body string

+ Destination string

+ Headers map[string][]string

+ Method string

+ Path string

+ Query string

+ RemoteAddr string

+ Scheme string

+ type ResponseDetails struct

+ Body string

+ Headers map[string][]string

+ Status int

+ type Stats struct

+ Counters map[string]int64

+ Gauges map[string]int64

+ GaugesFloat map[string]float64

Feb 4, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 27, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

type Cache

+ func (c *Cache) RecordsCount() (count int, err error)

+ type CounterByMode struct

+ func NewModeCounter() *CounterByMode

+ func (c *CounterByMode) Count(mode string)

+ func (c *CounterByMode) Flush() (h HoverflyStats)

+ func (c *CounterByMode) Init()

type DBClient

+ func (d *DBClient) StatsHandler(w http.ResponseWriter, req *http.Request)

+ func (d *DBClient) StatsWSHandler(w http.ResponseWriter, r *http.Request)

+ type HoverflyStats struct

+ Counters map[string]int64

+ Gauges map[string]int64

+ GaugesFloat map[string]float64

Jan 21, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const DefaultDatabaseName

type DBClient

+ func (d *DBClient) StateHandler(w http.ResponseWriter, r *http.Request)

Jan 11, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 8, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 7, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 7, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const DefaultAdminPort

type Configuration

+ func InitSettings() *Configuration

+ func (c *Configuration) GetMode() (mode string)

+ func (c *Configuration) SetMode(mode string)

Jan 6, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Jan 6, 2016 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ var TestDB *bolt.DB

+ func GetRandomName(n int) []byte

type Cache

+ func (c *Cache) DeleteBucket(name []byte) (err error)

+ func (c *Cache) Get(key []byte) (value []byte, err error)

+ func (c *Cache) GetAllRequests() (payloads []Payload, err error)

+ func (c *Cache) Set(key, value []byte) error

type DBClient

+ func (d *DBClient) RecordsCount(w http.ResponseWriter, req *http.Request)

Dec 29, 2015 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Dec 29, 2015 GO-2024-3108 +2 more

  GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

  GO-2025-3944: Hoverfly is vulnerable to Remote Code Execution through an insecure middleware implementation in github.com/SpectoLabs/hoverfly

  GO-2025-3945: WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled in github.com/SpectoLabs/hoverfly

Changes in this version

+ const CaptureMode

+ const DefaultPort

+ const ModifyMode

+ const SynthesizeMode

+ const VirtualizeMode

+ func Pipeline(cmds ...*exec.Cmd) (pipeLineOutput, collectedStandardError []byte, pipeLineError error)

+ type Cache struct

+ type Client struct

+ HTTPClient *http.Client

+ type Configuration struct

+ var AppConfig Configuration

+ type Constructor struct

+ func NewConstructor(req *http.Request, payload Payload) Constructor

+ func (c *Constructor) ApplyMiddleware(middleware string) error

+ type DBClient struct

+ func (d *DBClient) AllRecordsHandler(w http.ResponseWriter, req *http.Request)

+ func (d *DBClient) CurrentStateHandler(w http.ResponseWriter, req *http.Request)

+ func (d *DBClient) DeleteAllRecordsHandler(w http.ResponseWriter, req *http.Request)

+ func (d *DBClient) ImportRecordsHandler(w http.ResponseWriter, req *http.Request)

+ type Payload struct

+ ID string

+ Request requestDetails

+ Response response

+ func ExecuteMiddleware(command string, payload Payload) (Payload, error)

+ type StateRequest struct

+ Destination string

+ Mode string