Advisories · Technology
mealie.
Every CVE that names mealie among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch
- mealie
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery
- Mealie
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Mealie before 3.21.0 Information Disclosure via Ratings Endpoint
- mealie
- Broken access control
- CVSS 5.3 Medium
mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access
- mealie
- Race condition
- CVSS 6.5 Medium
Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228)
- mealie
- Denial of service
- CVSS 6.2 Medium
Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227)
- mealie
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Mealie contains a DoS vulnerability in recipe importer
- mealie
- Denial of service
- CVSS 4.1 Medium
Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225)
- mealie
- Server-side request forgery (SSRF)