@mockoon/commons-server vulnerabilities (npm)
3 vulnerabilities.
-
@mockoon/commons-servernpm Mockoon: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check) 6.5 Medium -
@mockoon/commons-servernpm Mockoon: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft 8.8 High -
@mockoon/commons-servernpm Mockoon has a Path Traversal and LFI in the static file serving endpoint 7.5 High