Hoverfly allows an arbitrary file read in the /api/v2/simulation endpoint (GHSL-2023-274) in github.com/SpectoLabs/hoverfly
/api/v2/simulation
GHSL-2023-274