CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72561

CVE-2026-72561 describes a broken access control in Peppermint Lab Peppermint. Through commit ba6e217, any authenticated non-administrative user can reconfigure the platform’s global OIDC/SSO settings via an unprotected configuration endpoint that performs no administrative role check before appl...

EUVD-2026-56031

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

CVE-2026-72555

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72555

Peppermint Lab Peppermint is affected by a broken access control vulnerability (CVE-2026-72555) caused by the Config.roles_active flag defaulting to false, making all permission checks on ticket, client, and user handlers no-ops on default installations. As a result, all authenticated users can r...

CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

EUVD-2026-56025

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

CVE-2026-72561: Improper Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

PT-2026-70130

Name of the Vulnerable Software and Affected Versions Peppermint Lab Peppermint versions through commit ba6e217 Description Broken access control occurs because the Config.roles active flag defaults to false, which causes permission checks on ticket, client, and user handlers to behave as no-ops...

CVE-2026-72555: Improper Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

PT-2026-70136

Name of the Vulnerable Software and Affected Versions Peppermint Lab Peppermint versions prior to commit ba6e217 Description Broken access control allows authenticated non-administrative users to reconfigure global OIDC/SSO settings. This occurs because a configuration endpoint fails to perform...

Malicious code in elf-stats-peppermint-northstar-168 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7272 Malicious code in elf-stats-peppermint-northstar-168 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in elf-stats-peppermint-fir-730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5039d15c88cd29e035800670b6bd90ab44e1915d560eaf8917ef7cc175d1e86c The package elf-stats-peppermint-fir-730 was found to contain malicious code...

Malicious code in elf-stats-peppermint-wishlist-307 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe62a90e39574207020ca4b713b10ebbc5f218dc93626332919f90826a58040b The package elf-stats-peppermint-wishlist-307 was found to contain malicious code...

EUVD-2025-202787

Malicious code in elf-stats-peppermint-wishlist-307 npm...

EUVD-2025-202788

Malicious code in elf-stats-peppermint-fir-730 npm...

MAL-2025-192521 Malicious code in elf-stats-peppermint-fir-730 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5039d15c88cd29e035800670b6bd90ab44e1915d560eaf8917ef7cc175d1e86c The package elf-stats-peppermint-fir-730 was found to contain malicious code...