getmockd/mockd

v0.6.6 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

api-mocking chaos-engineering cli developer-tools go graphql

+9 more

grpc mcp mock-server mqtt service-virtualization soap sse testing websocket

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 1mo

Version v0.6.6 hardens localhost authentication to prevent bypass and locks down admin CORS.

Why it matters: Security severity rated 90; protects admin authentication surface from bypass attacks.

Summary

AI summary

Hardened localhost authentication bypass and locked down admin CORS.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Hardens localhost authentication to prevent bypass. Hardens localhost authentication to prevent bypass. Source: llm_adapter@2026-06-15 Confidence: high	—
Security	Medium	Restricts admin CORS origins to mitigate cross-origin attacks. Restricts admin CORS origins to mitigate cross-origin attacks. Source: granite4.1:30b@2026-06-15-audit Confidence: low	—

Full changelog

Changelog

470e4cda7d7f88f37213ad40812cf50e3adddec6 fix(admin): harden localhost auth bypass and lock down admin CORS (#33)

Security Fixes

Hardened localhost authentication bypass and locked down admin CORS.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track getmockd/mockd

Get notified when new releases ship.

About getmockd/mockd

Multi-protocol API mock server with 18 MCP tools. Mock HTTP, GraphQL, gRPC, WebSocket, MQTT, SSE, and SOAP APIs with chaos engineering, stateful CRUD, 8 import formats (OpenAPI, Postman, HAR, WireMock, cURL, Mockoon, WSDL), and deterministic seeded responses.

All releases →