CVE-2026-59179

OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, "@openhop/server" passes unauthenticated flow route parameters from "GET /api/flows/:id" and "DELETE /api/flows/:id" in "packages/server/src/routes.ts" to "FlowStore.filePath" in "packages/server/src/store.ts" without ...