Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Recipes MEDIUM 6.5
CVE-2026-27460

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.5, a critical Denial of Service (Do…

Fix: 2.6.5+
Fix from $1,600 2026-04-10
Recipes HIGH 8.1
CVE-2026-35488

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, RecipeBookViewSet and RecipeBook…

Fix: 2.6.4+
Fix from $1,950 2026-04-07
Recipes HIGH 7.3
CVE-2026-35489

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the POST /api/food/{id}/shopping…

Fix: 2.6.4+
Fix from $1,950 2026-04-07
Recipes HIGH 8.1
CVE-2026-35045

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update…

Fix: 2.6.4+
Fix from $1,950 2026-04-06
Recipes MEDIUM 5.4
CVE-2026-35046

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authentic…

Fix: 2.6.4+
Fix from $1,600 2026-04-06
Recipes HIGH 7.5
CVE-2026-33152

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, Tandoor Recipes conf…

Fix: 2.6.0+
Fix from $1,950 2026-03-26
Recipes MEDIUM 6.5
CVE-2026-33153

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the Recipe API endpo…

Fix: 2.6.0+
Fix from $1,600 2026-03-26
Recipes HIGH 8.1
CVE-2026-33149

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and including 2.5.3 set ALLOWED_H…

Fix: after 2.5.3
Fix from $1,950 2026-03-26
Recipes MEDIUM 6.5
CVE-2026-33148

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the FDC (USDA FoodDa…

Fix: 2.6.0+
Fix from $1,600 2026-03-26
Recipes MEDIUM 5.3
CVE-2026-29055

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the image processing…

Fix: 2.6.0+
Fix from $1,600 2026-03-26
Recipes MEDIUM 6.5
CVE-2026-28503

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the `SyncViewSet.que…

Fix: 2.6.0+
Fix from $1,600 2026-03-26
Recipes HIGH 7.7
CVE-2026-25991

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Req…

Fix: 2.5.1+
Fix from $1,950 2026-02-13
Recipes MEDIUM 6.5
CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in…

No fix yet
Fix from $1,600 2025-09-19
Recipes MEDIUM 6.5
CVE-2025-23212

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to …

Fix: 1.5.28+
Fix from $1,600 2025-01-28
Recipes MEDIUM 5.4
CVE-2025-23213

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload feature allows to upload arbitra…

Fix: 1.5.28+
Fix from $1,600 2025-01-28
Recipes CRITICAL 9.9
CVE-2025-23211

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to e…

Fix: 1.5.24+
Fix from $2,300 2025-01-28
Recipes MEDIUM 6.5
CVE-2024-0403

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF.

No fix yet
Fix from $1,600 2024-03-01
Recipes MEDIUM 6.5
CVE-2022-23071

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker…

Fix: after 1.2.5
Fix from $1,600 2022-06-19