<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: mealie</title><description>Every new CVE for mealie.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108594: Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch</title><link>https://agentprime.io/advisories/CVE-2026-108594/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108594/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 18:16:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94028: mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-94028/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94028/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 20 Sep 2026 13:00:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93736: Mealie before 3.21.0 Information Disclosure via Ratings Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-93736/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93736/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 16:04:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71210: mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access</title><link>https://agentprime.io/advisories/CVE-2026-71210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71210/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 06:59:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31994: Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228)</title><link>https://agentprime.io/advisories/CVE-2024-31994/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31994/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Apr 2024 21:11:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31993: Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227)</title><link>https://agentprime.io/advisories/CVE-2024-31993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31993/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Apr 2024 21:02:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31992: Mealie contains a DoS vulnerability in recipe importer</title><link>https://agentprime.io/advisories/CVE-2024-31992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31992/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Apr 2024 20:49:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31991: Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225)</title><link>https://agentprime.io/advisories/CVE-2024-31991/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31991/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 19 Apr 2024 20:42:05 GMT</pubDate><category>CVE</category></item></channel></rss>