CVE Catalog
CVE-2026-34848
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
Hoppscotch, an open source API development ecosystem, contains a stored XSS vulnerability in the team member overflow tooltip via display name. This issue exists prior to version 2026.3.0.
Risk Assessment
An attacker can inject malicious JavaScript that executes in other users' browsers, potentially leading to session theft or data exfiltration.
Recommendation
Update Hoppscotch to version 2026.3.0 or later.
Original NVD description (English source)
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0.