openhop vulnerabilities

CVEs whose affected-version data names the openhop package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59179High· 8.3

3d ago

OpenHop: Path Traversal in Flow ID File Operations

OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameters from `GET /api/flows/:id` and `DELETE /api/flows/:id` in `packages/server/src/routes.ts` to `Fl…

▾ Twilightnaorsabag · openhopvia CVEORG