Skip to content
OpenAdvisories

Vendor

Peppermint Lab

5 known vulnerabilities.

Products

Peppermint 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111353

    Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints

    Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new o…

    Peppermint Lab Peppermint
  • Medium 4.3
    CVE-2026-85392

    Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint

    Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows authenticated attackers to delete sessions for any user by supplying arbitrary user IDs. Attackers can forcibly log out any us…

    Peppermint Lab Peppermint