What’s Vulnerable › Products

Peppermint-Lab peppermint vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Peppermint-Lab peppermint version is affected

Latest Peppermint-Lab peppermint vulnerabilities

• CVE-2026-111353 — Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints (CVSS 4.3)
• CVE-2026-85392 — Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint (CVSS 4.3)
• CVE-2026-85391 — Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml (CVSS 9.8)