CVE-2026-28216

hoppscotch is an open source API development ecosystem. Prior to version 2026.2.0, any logged-in user can read, modify or delete another user's personal environment by ID. "user-environments.resolver.ts:82-109", "updateUserEnvironment" mutation uses "@UseGuardsGqlAuthGuard" but is missing the...