Vulnerabilities

TI-2026-42316 CVE-2026-59149 · GHSA-8wqc-v2q8-vff2

Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

MEDIUM 62

Mockoon provides way to design and run mock APIs.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00483 Published 2026-07-09 Fixed in 9.7.0 CWE-22

TI-2026-42315 CVE-2026-59148 · GHSA-rqx4-3f6q-3x2v

HIGH 73

Mockoon provides way to design and run mock APIs.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-07-09 Fixed in 9.7.0 CWE-306

TI-2025-36691 CVE-2025-59049 · GHSA-w7f9-wqc4-3wxr

HIGH 72

Mockoon provides way to design and run mock APIs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01764 Published 2025-09-10 Fixed in 9.2.0 CWE-22