CVE-2025-59049
2 advisories.
npm/@mockoon/commons-server CVE-2025-59049: high 7.5, EPSS 1.76%
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Action: Upgrade @mockoon/commons-server to 9.2.0 or later.
npm i @mockoon/commons-server@9.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2.0 | - |
Fixed versions
| 9.2.0 |
Sources
- osv: GHSA-w7f9-wqc4-3wxr
- https://github.com/mockoon/mockoon/security/advisories/GHSA-w7f9-wqc4-3wxr
- https://nvd.nist.gov/vuln/detail/CVE-2025-59049
- https://github.com/mockoon/mockoon/commit/c7f6e23e87dc3b8cc44e5802af046200a797bd2e
- https://github.com/mockoon/mockoon
- https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400
- https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551
CVE-2025-59049 · published · modified · JSON
npm/@mockoon/cli CVE-2025-59049: high 7.5, EPSS 1.76%
Mockoon has a Path Traversal and LFI in the static file serving endpoint
Action: Upgrade @mockoon/cli to 9.2.0 or later.
npm i @mockoon/cli@9.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2.0 | - |
Fixed versions
| 9.2.0 |
Sources
- osv: GHSA-w7f9-wqc4-3wxr#npm/@mockoon/cli
- https://github.com/mockoon/mockoon/security/advisories/GHSA-w7f9-wqc4-3wxr
- https://nvd.nist.gov/vuln/detail/CVE-2025-59049
- https://github.com/mockoon/mockoon/commit/c7f6e23e87dc3b8cc44e5802af046200a797bd2e
- https://github.com/mockoon/mockoon
- https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400
- https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551
CVE-2025-59049 · published · modified · JSON