Peppermint-Lab peppermint

2 known vulnerabilities in Peppermint-Lab peppermint, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-85392 CVSS 5.3 medium Peppermint through 0.5.5 contains an authorization bypass vulnerability in the GET /api/v1/auth/user/:id/logout endpoint that allows…
CVE-2026-85391 CVSS 9.3 critical Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge…