Peppermint Lab Peppermint

• CVE-2026-111353 Medium 4.3 Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints 0.3%
• CVE-2026-85392 Medium 4.3 Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint 0.5%
• CVE-2026-85391 Critical 9.8 Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml 0.6%
• CVE-2026-72561 High 8.8 Peppermint Lab Peppermint - Broken Access Control 0.4%
• CVE-2026-72555 High 8.1 Peppermint Lab Peppermint - Broken Access Control 0.4%