Mockoon vulnerabilities
We track 2 vulnerabilities in Mockoon products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Mockoon vulnerabilities
- 8.8 High severity
mockoon: Missing Authentication for Critical Functionality
Mockoon provides way to design and run mock APIs. Prior to 9.7.0, Mockoon's admin API in commons-server/src/libs/server/admin-api.ts is mounted on the same Express listener as user-defined mock routes, enabled by default in shipped runtimes, serves Access-Cont
- 7.5 High severity
mockoon: Improper Limitation of a Pathname to a Restricted Directory
Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user i