@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Moderate severity GitHub Reviewed Published Jun 22, 2026 in mockoon/mockoon • Updated Sep 11, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts