agentprime: hoppscotchEvery new CVE for hoppscotch.https://agentprime.io/CVE-2026-69189: Hoppscotch: Cross-user private data exposure and UserHistory IDOR via team GraphQL resolvershttps://agentprime.io/advisories/CVE-2026-69189/https://agentprime.io/advisories/CVE-2026-69189/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 15:05:10 GMTCVECVE-2026-59720: Hoppscotch: Insecure Default Configuration Allows Public Exposure of Private Collection Data via Mock Serverhttps://agentprime.io/advisories/CVE-2026-59720/https://agentprime.io/advisories/CVE-2026-59720/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 17:27:34 GMTCVECVE-2026-59721: Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injectionhttps://agentprime.io/advisories/CVE-2026-59721/https://agentprime.io/advisories/CVE-2026-59721/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 17:24:46 GMTCVECVE-2026-50160: Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwritehttps://agentprime.io/advisories/CVE-2026-50160/https://agentprime.io/advisories/CVE-2026-50160/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 17:48:49 GMTCVEcriticalCVE-2026-44478: hoppscotch: Unauthenticated Onboarding Config Disclosure via Empty Recovery Tokenhttps://agentprime.io/advisories/CVE-2026-44478/https://agentprime.io/advisories/CVE-2026-44478/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:47:01 GMTCVECVE-2026-34931: hoppscotch: Improper loopback redirect_uri validation in device-login flowhttps://agentprime.io/advisories/CVE-2026-34931/https://agentprime.io/advisories/CVE-2026-34931/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:21:35 GMTCVECVE-2026-34848: hoppscotch: Stored XSS in team member overflow tooltip via display namehttps://agentprime.io/advisories/CVE-2026-34848/https://agentprime.io/advisories/CVE-2026-34848/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:20:00 GMTCVECVE-2026-34932: hoppscotch: Stored XSS via mock server responses on backend originhttps://agentprime.io/advisories/CVE-2026-34932/https://agentprime.io/advisories/CVE-2026-34932/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:19:15 GMTCVECVE-2026-34847: hoppscotch: Open redirect via `/enter?redirect=`https://agentprime.io/advisories/CVE-2026-34847/https://agentprime.io/advisories/CVE-2026-34847/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:19:05 GMTCVECVE-2026-30825: hoppscotch: IDOR - Any authenticated user can revoke any other user's Personal Access Tokenhttps://agentprime.io/advisories/CVE-2026-30825/https://agentprime.io/advisories/CVE-2026-30825/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Mar 2026 05:13:13 GMTCVECVE-2026-28217: IDOR in GraphQL userCollection Query Exposes Other Users' Private Collectionshttps://agentprime.io/advisories/CVE-2026-28217/https://agentprime.io/advisories/CVE-2026-28217/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 22:38:33 GMTCVECVE-2026-28216: hoppscotch has IDOR in updateUserEnvironment / deleteUserEnvironmenthttps://agentprime.io/advisories/CVE-2026-28216/https://agentprime.io/advisories/CVE-2026-28216/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 22:36:50 GMTCVECVE-2026-28215: hoppscotch Vulnerable to Unauthenticated Onboarding Config Takeoverhttps://agentprime.io/advisories/CVE-2026-28215/https://agentprime.io/advisories/CVE-2026-28215/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 22:34:46 GMTCVEcriticalCVE-2024-27092: Content spoofing - real Hoppscotch emailshttps://agentprime.io/advisories/CVE-2024-27092/https://agentprime.io/advisories/CVE-2024-27092/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Feb 2024 19:40:57 GMTCVECVE-2023-34097: Database password exposed in logs in hoppscotchhttps://agentprime.io/advisories/CVE-2023-34097/https://agentprime.io/advisories/CVE-2023-34097/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Jun 2023 20:02:04 GMTCVE