@mockoon/commons-server vulnerabilities

CVEs whose affected-version data names the @mockoon/commons-server package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59149Medium· 6.5

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

▾ Sunlitmockoon · @mockoon/commons-serverEPSS 0.48%via GHSA

@mockoon/commons-server vulnerabilities (CVEs) · VulnSea