blob: de459f2d3e9832dbac82d7a882e5a9a4a1feb157 [file] [edit]
id: GO-2026-5975
modules:
- module: github.com/SpectoLabs/hoverfly
versions:
- fixed: 1.12.8
vulnerable_at: 1.12.7
summary: 'Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions in github.com/SpectoLabs/hoverfly'
cves:
- CVE-2026-50018
ghsas:
- GHSA-42j2-w334-qxw7
references:
- advisory: https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-42j2-w334-qxw7
- fix: https://github.com/SpectoLabs/hoverfly/pull/1228
- web: https://github.com/SpectoLabs/hoverfly/releases/tag/v1.12.8
source:
id: GHSA-42j2-w334-qxw7
created: 2026-07-17T13:15:58.690978288-04:00
review_status: UNREVIEWED