All issues

Search results

Any Authenticated User Can Forcibly Log Out Any Other User Account

Status: Open.

#529In Peppermint-Lab/peppermint;

· geo-chen opened on Jul 6, 2026

Hardcoded JWT Secret in docker-compose.yml Enables Token Forgery

Status: Open.

#528In Peppermint-Lab/peppermint;

· geo-chen opened on Jul 6, 2026

Broken Permission Enforcement Gives Any Authenticated User Admin Access in Default Peppermint Deployment

Status: Open.

#527In Peppermint-Lab/peppermint;

· geo-chen opened on Jul 6, 2026

Setup docs drift: docker-compose and DATABASE_URL missing from README

Status: Open.

#526In Peppermint-Lab/peppermint;

· ariesadonis opened on Jun 25, 2026

OIDC session missing userAgent/ipAddress → checkSession() deletes it as "hijacking"

Status: Open.

#523In Peppermint-Lab/peppermint;

· hoivuth opened on May 10, 2026

Domain peppermint.sh is redirecting to namecheap as expired

Status: Open.

#520In Peppermint-Lab/peppermint;

· ottoflux opened on Apr 14, 2026

SMTP Email: Microsoft still not an option.

Status: Open.

#518In Peppermint-Lab/peppermint;

· Indar17 opened on Feb 27, 2026

Multiple authorization bypass and IDOR vulnerabilities in API

Status: Open.

#517In Peppermint-Lab/peppermint;

· lighthousekeeper1212 opened on Feb 25, 2026

XDaily error - Peppermint

Status: Open.

#516In Peppermint-Lab/peppermint;

· a425952-debug opened on Feb 25, 2026

Security disclosure, request for private contact

Status: Open.

#515In Peppermint-Lab/peppermint;

· ghost opened on Feb 23, 2026

[BUG] Error Processing Email Queue - Error: Invalid Credentials

Status: Open.

#512In Peppermint-Lab/peppermint;

· briannelson95 opened on Jan 13, 2026

Update ES locales

Status: Open.

#510In Peppermint-Lab/peppermint;

· sistemas4comret opened on Dec 15, 2025