Log in Start free

Peppermint Lab

Products

ProductCVEsExploitedLatest
Peppermint5–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-111353 Medium 4.3 Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints 0.3%
  • CVE-2026-85392 Medium 4.3 Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint 0.5%
  • CVE-2026-85391 Critical 9.8 Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml 0.6%
  • CVE-2026-72561 High 8.8 Peppermint Lab Peppermint - Broken Access Control 0.4%
  • CVE-2026-72555 High 8.1 Peppermint Lab Peppermint - Broken Access Control 0.4%