Cve 2026 50160

CVE-2026-50160 in self-hosted Hoppscotch lets attackers overwrite JWT secrets with one HTTP request—no credentials needed. Patch immediately.