Skip to content
OpenAdvisories

Vendor

Peppermint Lab

5 known vulnerabilities.

Products

Peppermint 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85391

    Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

    Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access…

    Peppermint Lab Peppermint