hoppscotch — Vulnerabilities & Security Advisories 18

Hoppscotch serves as an API development and testing tool, allowing developers to construct and send HTTP requests. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 13 recorded CVEs. Notable security characteristics include its client-side nature, which limits some attack surfaces, though vulnerabilities have often stemmed from improper input validation and insecure default configurations. While no major public security incidents have been widely documented, the consistent discovery of RCE and XSS vulnerabilities in its versions highlights ongoing security challenges that require careful implementation and regular updates.