CVE-2026-72561

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72555

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72561

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72561

CVE-2026-72561 describes a broken access control in Peppermint Lab Peppermint. Through commit ba6e217, any authenticated non-administrative user can reconfigure the platform’s global OIDC/SSO settings via an unprotected configuration endpoint that performs no administrative role check before appl...

EUVD-2026-56031

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72555

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72555

Peppermint Lab Peppermint is affected by a broken access control vulnerability (CVE-2026-72555) caused by the Config.roles_active flag defaulting to false, making all permission checks on ticket, client, and user handlers no-ops on default installations. As a result, all authenticated users can r...

EUVD-2026-56025

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

MAL-2026-7272 Malicious code in elf-stats-peppermint-northstar-168 (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2025-202787

Malicious code in elf-stats-peppermint-wishlist-307 npm...

Malicious code in elf-stats-peppermint-wishlist-307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe62a90e39574207020ca4b713b10ebbc5f218dc93626332919f90826a58040b The package elf-stats-peppermint-wishlist-307 was found to contain malicious code...

MAL-2025-192521 Malicious code in elf-stats-peppermint-fir-730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5039d15c88cd29e035800670b6bd90ab44e1915d560eaf8917ef7cc175d1e86c The package elf-stats-peppermint-fir-730 was found to contain malicious code...

Malicious code in elf-stats-peppermint-fir-730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5039d15c88cd29e035800670b6bd90ab44e1915d560eaf8917ef7cc175d1e86c The package elf-stats-peppermint-fir-730 was found to contain malicious code...

EUVD-2025-202788

Malicious code in elf-stats-peppermint-fir-730 npm...

MAL-2025-192522 Malicious code in elf-stats-peppermint-wishlist-307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe62a90e39574207020ca4b713b10ebbc5f218dc93626332919f90826a58040b The package elf-stats-peppermint-wishlist-307 was found to contain malicious code...

Malicious code in elf-stats-peppermint-hollyberry-893 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a963811fd8bcfe8003e4595947b7f0a2089713343390c962c68e43a1cbd0af The package elf-stats-peppermint-hollyberry-893 was found to contain malicious code...

EUVD-2025-201068

Malicious code in elf-stats-peppermint-hollyberry-893 npm...

MAL-2025-192226 Malicious code in elf-stats-peppermint-hollyberry-893 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a963811fd8bcfe8003e4595947b7f0a2089713343390c962c68e43a1cbd0af The package elf-stats-peppermint-hollyberry-893 was found to contain malicious code...