Peppermint JWT Signing Secret Exposure

Peppermint, a web application, is affected by a hardcoded JWT signing secret in its docker-compose.yml file.

Attackers can exploit this to forge session tokens for any account, allowing them to access protected endpoints without valid credentials.