Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/09 11:51 p.m.2 views

GHSA-G72F-JW3W-MGH7 @openhop/server: Path Traversal in Flow ID File Operations

Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...

8.3CVSS
SaveExploits0References3
Rows per page
Query Builder