Skip to content
OpenAdvisories

Vendor

Tandoor Recipes

24 known vulnerabilities.

Products

recipes 23 Tandoor Recipes 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.7
    CVE-2026-59970 Public exploit

    Tandoor Recipes: Blind SSRF via AI provider URL (api_base)

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an aut…

    Tandoor Recipes recipes
  • High 8.1
    CVE-2026-35045 Public exploit

    Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modification

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space,…

    Tandoor Recipes recipes
  • High 8.1
    CVE-2026-33149 Public exploit

    Tandoor Recipes Vulnerable to Host Header Injection

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Versions up to and including 2.5.3 set ALLOWED_HOSTS = '*' by default, which causes Django to accept any value in the HTTP Host header without validation. The…

    Tandoor Recipes recipes
  • High 7.7
    CVE-2026-25991 Public exploit

    Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Import

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, there is a Blind Server-Side Request Forgery (SSRF) vulnerability in the Cookmate recipe import feature of Tandoor Recipes. The application fa…

    Tandoor Recipes recipes
  • Medium 4.9
    CVE-2026-25964 Public exploit

    Tandoor Recipes Affected by Authenticated Local File Disclosure (LFD) via Recipe Import leads to Arbitrary File Read

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.5.1, a Path Traversal vulnerability in the RecipeImport workflow of Tandoor Recipes allows authenticated users with import permissions to read arbi…

    Tandoor Recipes recipes
  • Critical 10.0
    CVE-2025-23211 Public exploit Scanner template

    Tandoor Recipes - SSTI - Remote Code Execution

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is …

    Tandoor Recipes recipes