{"api_version":"v1","generated_at":"2026-10-09T00:00:00+00:00","product":{"cve_count":16,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-hoppscotch-hoppscotch-64fcf06b700d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/hoppscotch","name":"hoppscotch","next_cursor":null,"observations":[{"affected":"hoppscotch: < 2026.6.0","affected_versions_present":true,"cve_id":"CVE-2026-69189","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-69189","fixed":"2026.6.0.","last_modified":"2026-08-18T15:32:32.233Z","patch_url":"https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-p25p-g9jp-7q46","primary_source":"","published":"2026-08-18T15:05:10.166Z"},{"affected":"< 2026.6.0","affected_versions_present":true,"cve_id":"CVE-2026-59720","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59720","fixed":"2026.6.0.","last_modified":"2026-07-09T18:28:44.107Z","patch_url":"https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-c68f-wr5p-j6jf","primary_source":"","published":"2026-07-09T17:27:34.067Z"},{"affected":"< 2026.6.0","affected_versions_present":true,"cve_id":"CVE-2026-59721","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59721","fixed":"2026.6.0.","last_modified":"2026-07-09T19:13:03.635Z","patch_url":"https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-v7q6-r45w-2c6r","primary_source":"","published":"2026-07-09T17:24:46.098Z"},{"affected":"<= 2026.4.1","affected_versions_present":true,"cve_id":"CVE-2026-50160","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-50160","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-02T03:57:34.538Z","patch_url":"https://github.com/hoppscotch/hoppscotch/pull/6171","primary_source":"","published":"2026-07-01T17:48:49.381Z"},{"affected":">= 2025.7.0, < 2026.4.0","affected_versions_present":true,"cve_id":"CVE-2026-44478","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44478","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-05-15T18:39:13.940Z","patch_url":"","primary_source":"","published":"2026-05-13T21:47:01.158Z"},{"affected":"< 2026.3.0","affected_versions_present":true,"cve_id":"CVE-2026-34931","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34931","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-06T14:07:20.977Z","patch_url":"","primary_source":"","published":"2026-04-02T19:21:35.136Z"},{"affected":"< 2026.3.0","affected_versions_present":true,"cve_id":"CVE-2026-34848","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34848","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-03T12:54:39.887Z","patch_url":"","primary_source":"","published":"2026-04-02T19:20:00.944Z"},{"affected":"< 2026.3.0","affected_versions_present":true,"cve_id":"CVE-2026-34932","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34932","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-06T14:07:40.655Z","patch_url":"","primary_source":"","published":"2026-04-02T19:19:15.697Z"},{"affected":"< 2026.3.0","affected_versions_present":true,"cve_id":"CVE-2026-34847","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-34847","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-03T15:39:17.767Z","patch_url":"","primary_source":"","published":"2026-04-02T19:19:05.703Z"},{"affected":"< 2026.2.1","affected_versions_present":true,"cve_id":"CVE-2026-30825","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-30825","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-09T20:42:45.007Z","patch_url":"","primary_source":"","published":"2026-03-07T05:13:13.987Z"},{"affected":"< 2026.2.0","affected_versions_present":true,"cve_id":"CVE-2026-28217","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28217","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-27T18:42:07.857Z","patch_url":"https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-m5pg-r4jp-qq75","primary_source":"","published":"2026-02-26T22:38:33.854Z"},{"affected":"< 2026.2.0","affected_versions_present":true,"cve_id":"CVE-2026-28216","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28216","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-27T18:43:16.218Z","patch_url":"","primary_source":"","published":"2026-02-26T22:36:50.539Z"},{"affected":"< 2026.2.0","affected_versions_present":true,"cve_id":"CVE-2026-28215","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28215","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-02T20:42:36.125Z","patch_url":"","primary_source":"","published":"2026-02-26T22:34:46.524Z"},{"affected":">= 0.5.0, < 0.8.0","affected_versions_present":true,"cve_id":"CVE-2024-34347","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-34347","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-10T15:33:47.072Z","patch_url":"","primary_source":"","published":"2024-05-08T14:16:38.206Z"},{"affected":"< 2023.12.6","affected_versions_present":true,"cve_id":"CVE-2024-27092","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-27092","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T00:27:57.835Z","patch_url":"https://github.com/hoppscotch/hoppscotch/commit/6827e97ec583b2534cdc1c2f33fa44973a0c2bf5","primary_source":"","published":"2024-02-26T19:40:57.427Z"},{"affected":"< 2023.4.5","affected_versions_present":true,"cve_id":"CVE-2023-34097","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-34097","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-08T15:58:21.195Z","patch_url":"https://github.com/hoppscotch/hoppscotch/commit/15424903ede20b155d764abf4c4f7c2c84c11247","primary_source":"","published":"2023-06-05T20:02:04.497Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"hoppscotch"}}