Hoppscotch

hoppscotch.io ↗
C
CAUTION
15
Total CVEs
10
Crit / High
4
Medium
0%
Unpatched
50%
Patched
7.6
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
50%
Unpatched
0%
Under Review
50%
✓ 2 patched ✗ 0 unpatched ~ 2 under review
▸ Intelligence by Audience
PoC Available
0 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"hoppscotch" port:443
org:"Hoppscotch" http.status:200
Top EPSS (Exploitation Probability)
CVE-2024-34347 0.62% exploitation probability
CVE-2024-27092 0.61% exploitation probability
CVE-2026-69189 0.36% exploitation probability
CVE-2024-34714 0.33% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
15
Critical severity
4
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
7.6
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories - The Hacker News
The Hacker News 2026-06-25
▸ Recent CVEs showing 20 of 4
CVE IDSeverityPatchEPSSDate
CVE-2026-69189 7.6 HIGH PATCH UNDER REVIEW 0.36% 2026-08-18
CVE-2024-34714 7.6 HIGH PATCHED / FIX AVAILABLE 0.33% 2024-05-14
CVE-2024-34347 8.4 HIGH PATCH UNDER REVIEW 0.62% 2024-05-08
CVE-2024-27092 5.4 MEDIUM PATCHED / FIX AVAILABLE 0.61% 2024-02-26
View all 4 CVEs for Hoppscotch →
▸Intel
Founded2019
CEOAndrew Bastin
Trust ScoreC — CAUTION
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
2 occurrences in Hoppscotch CVEs (13% of total)
CWE-79 ⓘ
2
CWE-639
Unknown Weakness Type
2 occurrences in Hoppscotch CVEs (13% of total)
CWE-639 ⓘ
2
CWE-601
Open Redirect
2 occurrences in Hoppscotch CVEs (13% of total)
CWE-601 ⓘ
2
CWE-639 (Authorization Bypass Through User-Controlled Key)
Unknown Weakness Type
1 occurrence in Hoppscotch CVEs (7% of total)
CWE-639 (Authorization Bypass Through User-Controlled Key) ⓘ
1
CWE-306
Missing Authentication
1 occurrence in Hoppscotch CVEs (7% of total)
CWE-306 ⓘ
1
CWE-284
Improper Access Control
1 occurrence in Hoppscotch CVEs (7% of total)
CWE-284 ⓘ
1
CWE-915
Unknown Weakness Type
1 occurrence in Hoppscotch CVEs (7% of total)
CWE-915 ⓘ
1
CWE-94
Code Injection
1 occurrence in Hoppscotch CVEs (7% of total)
CWE-94 ⓘ
1
▸Company Profile

Hoppscotch is an open-source API development platform that provides a web-based interface for testing and debugging HTTP, GraphQL, WebSocket, and other API protocols. It is widely used by developers as a lightweight alternative to tools like Postman, with a focus on privacy and security since requests are made directly from the user's browser. Its cybersecurity relevance lies in its role as a tool for API security testing and its open-source nature, which allows for community auditing of its code.

▸Response Metrics
Est. MTTR ⓘ ~60 days (Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +300% worse
CVE count 2026 vs 2024:  3 → 12 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€440K
Est. GDPR High
€4.4M

Based on 4 critical CVEs, 0 CISA KEV, 67% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Hoppscotch C valtersit.com