An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-26984.json"