Hoverfly allows an arbitrary file read in the /api/v2/simulation endpoint (GHSL-2023-274) in github.com/SpectoLabs/hoverfly
/api/v2/simulation
GHSL-2023-274
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2024-3108" }