EUVD-2025-201068

Malicious code in elf-stats-peppermint-hollyberry-893 npm...

MAL-2025-192226 Malicious code in elf-stats-peppermint-hollyberry-893 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a963811fd8bcfe8003e4595947b7f0a2089713343390c962c68e43a1cbd0af The package elf-stats-peppermint-hollyberry-893 was found to contain malicious code...

EUVD-2025-200839

Malicious code in elf-stats-peppermint-icicle-890 npm...

EUVD-2025-200838

Malicious code in elf-stats-peppermint-stocking-949 npm...

EUVD-2025-200840

Malicious code in elf-stats-peppermint-candy-233 npm...

Malicious code in elf-stats-peppermint-candy-233 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c09927fc4405be586a497798b2c60e046f755a35dace2f3031161b6e772800 The package elf-stats-peppermint-candy-233 was found to contain malicious code...

MAL-2025-192113 Malicious code in elf-stats-peppermint-icicle-890 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c727f51a933587722ba2bf80261b4eaabc57929060180b6934c9f3c7b1bfebc4 The package elf-stats-peppermint-icicle-890 was found to contain malicious code...

MAL-2025-192112 Malicious code in elf-stats-peppermint-candy-233 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c09927fc4405be586a497798b2c60e046f755a35dace2f3031161b6e772800 The package elf-stats-peppermint-candy-233 was found to contain malicious code...

Malicious code in elf-stats-peppermint-icicle-890 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c727f51a933587722ba2bf80261b4eaabc57929060180b6934c9f3c7b1bfebc4 The package elf-stats-peppermint-icicle-890 was found to contain malicious code...

Malicious code in elf-stats-peppermint-stocking-949 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb5ceef86f21613919365dd7efa729077eba63c28b1d901abc6229022ea4d32 The package elf-stats-peppermint-stocking-949 was found to contain malicious code...

MAL-2025-192114 Malicious code in elf-stats-peppermint-stocking-949 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb5ceef86f21613919365dd7efa729077eba63c28b1d901abc6229022ea4d32 The package elf-stats-peppermint-stocking-949 was found to contain malicious code...

EUVD-2023-51030

Malicious code in bioql PyPI...

EUVD-2023-30774

Malicious code in bioql PyPI...

EUVD-2023-46781

Malicious code in bioql PyPI...

CVE-2023-46864

Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/download?filepath=../ POST request...

CVE-2023-46863

Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request...

CVE-2023-26984

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request...

CVE-2024-31525

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result...

CVE-2024-31525

Peppermint Ticket Management 0.4.6 is affected by an Incorrect Access Control vulnerability. A regular registered user can elevate privileges to administrator because the authorization check is performed on the client side and not validated server-side. This can result in actions like creating a ...

Peppermint 访问控制错误漏洞

Peppermint is an open source ticket management system from Peppermint Labs. A security vulnerability exists in Peppermint version 0.4.6 that stems from improper access control that allows a regular user to elevate privileges to administrator...