Skip to content
OpenAdvisories

Vendor

mockoon

3 known vulnerabilities.

Products

mockoon 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-59149

    Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

    Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is confined by getSafeFilePath in packages/commons-server/src/libs/server/server.ts with resolvedPath.startsWith(staticBaseDir). That prefix t…

    mockoon mockoon @mockoon/cli @mockoon/commons-server npm