Advisories · Technology
peppermint.
Every CVE that names peppermint among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints
- peppermint
- Broken access control
- CVSS 5.3 Medium
Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint
- peppermint
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml
- peppermint
- Hard-coded credentials
- CVSS 8.8 High
Peppermint Lab Peppermint - Broken Access Control
- Peppermint
- Broken access control
- CVSS 8.1 High
Peppermint Lab Peppermint - Broken Access Control
- Peppermint
- Broken access control