openhop vulnerabilities

1 known vulnerability in openhop from Naorsabag. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  openhop: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-59179Oct 28, 2026Naorsabag

  OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated flow route parameters from `GET /api/flows/:id` and `DELETE /api/flows/:id` in `packages/server/src/routes.ts` to `FlowStore.filePath()` in