Skip to content
OpenAdvisories

Package · npm

@openhop/server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.3
    CVE-2026-59179

    OpenHop: Path Traversal in Flow ID File Operations

    OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameters from `GET /api/flows/:id` and `DELETE /api/flows/:id` in `packages/server/src/routes.ts` to `FlowStore.filePath()` in…

    naorsabag openhop @openhop/server npm