TandoorRecipes vulnerabilities

Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

TandoorRecipes · recipes

Tandoor Recipes: Blind SSRF via AI provider URL (api_base)

TandoorRecipes · recipes

Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

TandoorRecipes · recipes

Tandoor Recipes: ReDoS (Regular Expression Denial of Service) via User-Controlled Automation Regex Patterns

TandoorRecipes · recipes

Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpoints

TandoorRecipes · recipes

Tandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipes

TandoorRecipes · recipes

Tandoor Recipes: Cross-user IDOR in /api/recipe-from-source/ bookmarklet import — read and destroy another space member's pending BookmarkletImport

TandoorRecipes · recipes

Tandoor Recipes Affected by Denial of Service via Recipe Import

TandoorRecipes · recipes

Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`

TandoorRecipes · recipes

Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users

TandoorRecipes · recipes