https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-54376.htmlhttps://patchthecve.com/cve/CVE-2025-54376.htmlWed, 17 Jun 2026 09:39:56 +0000HIGH 7.5: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote attacker can stream real-time application lhttps://patchthecve.com/cve/CVE-2025-54123.htmlhttps://patchthecve.com/cve/CVE-2025-54123.htmlWed, 17 Jun 2026 09:39:29 +0000CRITICAL 9.8: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in user input. The vulnerability exists inhttps://patchthecve.com/cve/CVE-2024-45388.htmlhttps://patchthecve.com/cve/CVE-2024-45388.htmlWed, 17 Jun 2026 07:54:07 +0000HIGH 7.5: Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary fi