mockoon vulnerabilities
3 published CVEs name mockoon among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-59149
Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)
mockoon · mockoon
Medium6.5 - CVE-2026-59148
Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft
mockoon · mockoon
High8.8 - CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
mockoon · mockoon
High7.5