Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in user input. The vulnerability exists in the middleware management API endpoint `/api/v2/hoverfly/middleware`. This issue is born due to combination of three code level flaws: Insufficient Input Validation in middleware.go line 94-96; Un…

Affected: Go: github.com/SpectoLabs/hoverfly

### Summary It has been discovered that the middleware functionality in Hoverfly is vulnerable to command injection through its `/api/v2/hoverfly/middleware` endpoint due to insufficient validation and sanitization in user input.

### Details The vulnerability exists in the middleware management API endpoint `/api/v2/hoverfly/middleware`.

This issue is born due to combination of three code level flaws:

1.…

govulncheck-vulndb-0.0.20250917T170349-1.1 on GA media