PT-2026-29890 · Unknown · Hoppscotch

Aikido-Security + 4 · Published 2026-04-02 · Updated 2026-04-03 · CVE-2026-34932

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions hoppscotch versions prior to 2026.3.0

Description hoppscotch, an open source API development ecosystem, contains a stored Cross-Site Scripting (XSS) issue that could potentially lead to Cross-Site Request Forgery (CSRF).

Recommendations Update to version 2026.3.0 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-34932

Affected Products

Hoppscotch

References · 4

• https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-wj4r-hr4h-g98v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34932 · Security Note
• https://github.com/hoppscotch/hoppscotch/releases/tag/2026.3.0 · Note
• https://twitter.com/CVEnew/status/2040128765213192668 · Twitter Post