CVE-2026-50013

Hoverfly is an open source API simulation tool. Prior to version 1.12.8, when Hoverfly is running in Diff mode, the "AddDiff" function writes to the shared "responsesDiff" map without any synchronization no mutex. When multiple proxy requests are processed concurrently the normal case for any...

Concurrent Execution Using Shared Resource

github.com/spectolabs/hoverfly is vulnerable to Concurrent Execution using Shared Resource. The vulnerability is due to the AddDiff function writing to the shared responsesDiff map without proper synchronization when running in Diff mode, which allows an attacker to send multiple simultaneous...