Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2026-34847

hoppscotch: Open redirect via `/enter?redirect=`

Description

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, the /enter page contains a DOM-based open redirect vulnerability. The redirect query parameter is directly used to construct a URL and redirect the user without proper validation. This issue has been patched in version 2026.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hoppscotch hoppscotch

  • < 2026.3.0affected

References