CVE-2026-34848: hoppscotch: Stored XSS in team member overflow tooltip via display name
hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability in the team member overflow tooltip via display name. This issue has been patched in version 2026.3.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
hoppscotchto a version that resolves this vulnerability.Fixed in 2026.3.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34848?
CVE-2026-34848 is classified as a stored XSS vulnerability which can lead to execution of malicious scripts.
How do I fix CVE-2026-34848?
To fix CVE-2026-34848, upgrade to Hoppscotch version 2026.3.0 or later.
What versions of Hoppscotch are affected by CVE-2026-34848?
All versions of Hoppscotch prior to 2026.3.0 are affected by CVE-2026-34848.
What is the impact of CVE-2026-34848?
The impact of CVE-2026-34848 includes potential unauthorized access to user sessions and data via malicious scripts.
Who is affected by CVE-2026-34848?
Any user of Hoppscotch versions before 2026.3.0 is potentially affected by CVE-2026-34848.