Tandoor vulnerabilities

Products

• Recipes 22

Newest

• tandoor recipes Tandoor Recipes Affected by Denial of Service via Recipe Import CVE-2026-27460 6.5 MediumApril 10, 2026
• tandoor recipes Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/` CVE-2026-35489 7.3 HighApril 7, 2026
• tandoor recipes Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users CVE-2026-35488 8.1 HighApril 7, 2026
• tandoor recipes Tandoor has a Stored CSS Injection via <style> Tag in Recipe Instructions (API-Level) CVE-2026-35046 5.4 MediumApril 6, 2026
• tandoor recipes Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modification CVE-2026-35045 Public exploit 8.1 HighApril 6, 2026
• tandoor recipes Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication CVE-2026-33152 9.1 CriticalMarch 26, 2026
• tandoor recipes Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic CVE-2026-33153 7.7 HighMarch 26, 2026
• tandoor recipes URL Parameter Injection in FDC Food Search API Causes Server Crash and Exposes Internal API Key CVE-2026-33148 6.5 MediumMarch 26, 2026
• tandoor recipes Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII CVE-2026-29055 5.3 MediumMarch 26, 2026
• tandoor recipes Tandoor Recipes has Cross-Space IDOR in SyncViewSet.query_synced_folder: missing space scoping on get_object_or_404 CVE-2026-28503 5.5 MediumMarch 26, 2026
• tandoor recipes Tandoor Recipes Vulnerable to Host Header Injection CVE-2026-33149 Public exploit 8.1 HighMarch 26, 2026
• tandoor recipes Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Import CVE-2026-25991 Public exploit 7.7 HighFebruary 13, 2026
• tandoor recipes Tandoor Recipes Affected by Authenticated Local File Disclosure (LFD) via Recipe Import leads to Arbitrary File Read CVE-2026-25964 Public exploit 4.9 MediumFebruary 13, 2026
• tandoor recipes Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.... CVE-2025-57396 6.5 MediumSeptember 19, 2025
• tandoor recipes Tandoor Recipes - Stored XSS through Unrestricted File Upload CVE-2025-23213 8.7 HighJanuary 28, 2025
• tandoor recipes Tandoor Recipes - Local file disclosure - Users can read the content of any file on the server CVE-2025-23212 7.7 HighJanuary 28, 2025
• tandoor recipes Tandoor Recipes - SSTI - Remote Code Execution CVE-2025-23211 Public exploit 10.0 CriticalJanuary 28, 2025
• recipes Recipes 1.5.10 - Blind SSRF CVE-2024-0403 6.5 MediumFebruary 29, 2024
• recipes Recipes - Stored XSS in Name Parameter CVE-2022-23074 3.5 LowJune 21, 2022
• recipes Recipes - Stored XSS in Clipboard CVE-2022-23073 3.5 LowJune 21, 2022
• recipes Recipes - Stored XSS in Add to Cart CVE-2022-23072 3.5 LowJune 21, 2022
• recipes Recipes - SSRF on Import CVE-2022-23071 6.5 MediumJune 19, 2022