Browse CVEs

MEDIUM 6.5 CVE-2026-27460 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.5, a critical Denial of Service (Do… Recipes 2.6.5+ Fix from $1,6002026-04-10 HIGH 8.1 CVE-2026-35488 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, RecipeBookViewSet and RecipeBook… Recipes 2.6.4+ Fix from $1,9502026-04-07 HIGH 7.3 CVE-2026-35489 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the POST /api/food/{id}/shopping… Recipes 2.6.4+ Fix from $1,9502026-04-07 HIGH 8.1 CVE-2026-35045 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update… Recipes 2.6.4+ Fix from $1,9502026-04-06 MEDIUM 5.4 CVE-2026-35046 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authentic… Recipes 2.6.4+ Fix from $1,6002026-04-06 HIGH 7.5 CVE-2026-33152 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, Tandoor Recipes conf… Recipes 2.6.0+ Fix from $1,9502026-03-26 MEDIUM 6.5 CVE-2026-33153 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the Recipe API endpo… Recipes 2.6.0+ Fix from $1,6002026-03-26 HIGH 8.1 CVE-2026-33149 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and including 2.5.3 set ALLOWED_H… Recipes after 2.5.3 Fix from $1,9502026-03-26 MEDIUM 6.5 CVE-2026-33148 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the FDC (USDA FoodDa… Recipes 2.6.0+ Fix from $1,6002026-03-26 MEDIUM 5.3 CVE-2026-29055 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the image processing… Recipes 2.6.0+ Fix from $1,6002026-03-26 MEDIUM 6.5 CVE-2026-28503 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the `SyncViewSet.que… Recipes 2.6.0+ Fix from $1,6002026-03-26 HIGH 7.7 CVE-2026-25991 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Req… Recipes 2.5.1+ Fix from $1,9502026-02-13 MEDIUM 6.5 CVE-2025-57396 Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in… Recipes No fix yet Fix from $1,6002025-09-19 MEDIUM 6.5 CVE-2025-23212 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to … Recipes 1.5.28+ Fix from $1,6002025-01-28 MEDIUM 5.4 CVE-2025-23213 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitra… Recipes 1.5.28+ Fix from $1,6002025-01-28 CRITICAL 9.9 CVE-2025-23211 Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to e… Recipes 1.5.24+ Fix from $2,3002025-01-28 MEDIUM 6.5 CVE-2024-0403 Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF. Recipes No fix yet Fix from $1,6002024-03-01 MEDIUM 6.5 CVE-2022-23071 In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker… Recipes after 1.2.5 Fix from $1,6002022-06-19