Go/github.com/SpectoLabs/hoverfly CVE-2026-50018: unknown, EPSS 0.54%
Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly
Action: Upgrade github.com/SpectoLabs/hoverfly to 1.12.8 or later.
go get github.com/SpectoLabs/hoverfly@v1.12.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.8 | - |
Fixed versions
| 1.12.8 |
Sources
- osv: GO-2026-5975
- https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-42j2-w334-qxw7
- https://github.com/SpectoLabs/hoverfly/pull/1228
- https://github.com/SpectoLabs/hoverfly/releases/tag/v1.12.8
CVE-2026-50018 · published · modified · JSON