hoverfly vulnerabilities and fixes

Recent CVEs affecting hoverfly, with upgrade or downgrade steps. 3 tracked.

hoverfly has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-09-10. Highest priority: CVE-2025-54123 (score 71/100).

• CVE-2025-54376 HIGH 7.5 UPGRADE Hoverfly is an open source API simulation tool
• CVE-2025-54123 CRITICAL 9.8 UPGRADE Hoverfly is an open source API simulation tool
• CVE-2024-45388 HIGH 7.5 UPGRADE Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers

FAQ

How do I fix hoverfly vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is hoverfly being exploited right now?

None of the tracked hoverfly CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which hoverfly CVE should I patch first?

CVE-2025-54123 currently ranks highest (71/100): Hoverfly is an open source API simulation tool.

RSS feed for hoverfly · ← Back to latest CVEs