CVE-2026-34932 — hoppscotch: Stored XSS via mock server responses on backend origin
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in vers…
Published: 2026-04-02 · CVSS: 8.5 · CVSS 4.0
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version 2026.3.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7