HO
Product
hoppscotch
17
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 5Low 0
Watch
Add hoppscotch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50160 | 10.0 | Jul 1 | Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwrite Affected: <= 2026.4.1 |
| CVE-2026-34931 | 9.6 | Apr 2 | hoppscotch: Improper loopback redirect_uri validation in device-login flow Affected: < 2026.3.0 |
| CVE-2026-34932 | 9.3 | Apr 2 | hoppscotch: Stored XSS via mock server responses on backend origin Affected: < 2026.3.0 |
| CVE-2026-28215 | 9.1 | Feb 26 | hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeover Affected: < 2026.2.0 |
Showing 4