Skip to content

Hoppscotch Community Edition

v2026.6.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 26d API Development
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

api api-client api-rest api-testing developer-tools graphql
+11 more
http http-client pwa rest spa testing testing-tools tools vue vuejs websocket

Affected surfaces

deps

Summary

AI summary

Updates common, mock-server, and backend across a mixed release.

Full changelog

This release adds cookie persistence support on the Desktop App, id_token support across OAuth2 flows, mock server URL handling for subpath deployments, and Thai language support, alongside security patches and bug fixes.

Read more at: https://hoppscotch.com/blog/hoppscotch-v2026-6-0.

What's Changed

  • fix(mock-server): persist isPublic on creation, default to private by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6410
  • fix(backend): enforce ownership on user history and private User fields by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6409
  • fix(backend): reject path/query/fragment in SMTP URL validation by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6413
  • feat(sh-admin): surface which config fields block saving by @nivedin in https://github.com/hoppscotch/hoppscotch/pull/6385
  • chore: security patch for the dependency chain v2026.6.0 by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6450
  • feat(mock-server): append /backend to domain-based URL when subpath access is enabled by @mirarifhasan in https://github.com/hoppscotch/hoppscotch/pull/6448
  • fix(common): resolve environment variables in inherited collection headers by @sahil29roy in https://github.com/hoppscotch/hoppscotch/pull/6447
  • feat(desktop): desktop cookie persistence and reapplication by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6416
  • fix(desktop): sync self-hosted instance version from manifest by @cassiocauee in https://github.com/hoppscotch/hoppscotch/pull/6423
  • feat: add Thai translation by @anusoft in https://github.com/hoppscotch/hoppscotch/pull/6449
  • docs(js-sandbox): update development instructions by @abhaybansal0322 in https://github.com/hoppscotch/hoppscotch/pull/6387
  • fix(common): rewrite Finnish language pack by @roopepaajanen in https://github.com/hoppscotch/hoppscotch/pull/6402
  • fix(common): add missing Chinese locale keys by @nikhil-shukl in https://github.com/hoppscotch/hoppscotch/pull/6363
  • refactor(common): improve syncing systems and remove platform-wise duplications by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6334
  • feat(common): add OAuth2 token type selector for id_token support by @anwarulislam in https://github.com/hoppscotch/hoppscotch/pull/6444
  • fix(common): defer CookieJarService binding by @CuriousCorrelation in https://github.com/hoppscotch/hoppscotch/pull/6478

New Contributors

  • @sahil29roy made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6447
  • @cassiocauee made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6423
  • @anusoft made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6449
  • @abhaybansal0322 made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6387
  • @roopepaajanen made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6402
  • @nikhil-shukl made their first contribution in https://github.com/hoppscotch/hoppscotch/pull/6363

Full Changelog: https://github.com/hoppscotch/hoppscotch/compare/2026.5.0...2026.6.0

Security Fixes

  • Security patch applied to the dependency chain in version v2026.6.0
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Hoppscotch Community Edition

Get notified when new releases ship.

Sign up free

About Hoppscotch Community Edition

Fast and beautiful API request builder.

All releases →

Related context

Beta — feedback welcome: [email protected]