https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:47:28.417565+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363611 EUVD-2026-363611 2026-10-06T14:47:28.505831+00:00 EUVD-2026-363611 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85391 fkie_cve-2026-85391 2026-10-06T14:47:28.505883+00:00

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentials.

 https://cve.radiocsirt.org/vuln/ghsa-mjr9-fw4p-963x GHSA-mjr9-fw4p-963x 2026-10-06T14:47:28.505939+00:00

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentials.