Hoppscotch

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 17
    Known Exploited: 0
    4
    Critical Level Threats
    8
    High Level Threats
    4
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-69189

    Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team GraphQL resolvers

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-59720

    Hoppscotch: Insecure Default Configuration Allows Public Exposure of Private Collection Data via Mock Server

    Last Modified: Jul 09, 2026
    Published: Jul 09, 2026

    CVE-2026-59721

    Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection

    Last Modified: Jul 09, 2026
    Published: Jul 09, 2026

    CVE-2026-50160

    Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwrite

    Last Modified: Jul 02, 2026
    Published: Jul 01, 2026

    CVE-2026-44478

    hoppscotch: Unauthenticated Onboarding Config Disclosure via Empty Recovery Token

    Last Modified: May 15, 2026
    Published: May 13, 2026
    Items Per Page
    Hoppscotch Vulnerabilities & Security CVEs | CVE-DB