Vulnerabilities in Peppermint-Lab

3 results

CVE-2026-85391CRITICALPeppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.ymlEPSS 0.6%CVE-2026-85392MEDIUMPeppermint through 0.5.5 Authorization Bypass on the User Logout EndpointEPSS 0.5%CVE-2026-111353MEDIUMPeppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload EndpointsEPSS 0.3%