agentprime: recipesEvery new CVE for recipes.https://agentprime.io/CVE-2026-115810: Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URLhttps://agentprime.io/advisories/CVE-2026-115810/https://agentprime.io/advisories/CVE-2026-115810/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 16:12:12 GMTCVECVE-2026-59970: Tandoor Recipes: Blind SSRF via AI provider URL (api_base)https://agentprime.io/advisories/CVE-2026-59970/https://agentprime.io/advisories/CVE-2026-59970/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:21:07 GMTCVECVE-2026-61726: Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe contenthttps://agentprime.io/advisories/CVE-2026-61726/https://agentprime.io/advisories/CVE-2026-61726/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:19:57 GMTCVECVE-2026-59966: Tandoor Recipes: ReDoS (Regular Expression Denial of Service) via User-Controlled Automation Regex Patternshttps://agentprime.io/advisories/CVE-2026-59966/https://agentprime.io/advisories/CVE-2026-59966/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:18:57 GMTCVECVE-2026-59963: Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpointshttps://agentprime.io/advisories/CVE-2026-59963/https://agentprime.io/advisories/CVE-2026-59963/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 19:17:25 GMTCVECVE-2026-59962: Tandoor Recipes: ORM ORDER BY Injection via FK Traversal in Tandoor Recipeshttps://agentprime.io/advisories/CVE-2026-59962/https://agentprime.io/advisories/CVE-2026-59962/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:52:49 GMTCVECVE-2026-59967: Tandoor Recipes: Cross-user IDOR in /api/recipe-from-source/ bookmarklet import — read and destroy another space member's pending BookmarkletImporthttps://agentprime.io/advisories/CVE-2026-59967/https://agentprime.io/advisories/CVE-2026-59967/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:51:54 GMTCVECVE-2026-27460: Tandoor Recipes Affected by Denial of Service via Recipe Importhttps://agentprime.io/advisories/CVE-2026-27460/https://agentprime.io/advisories/CVE-2026-27460/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 19:09:05 GMTCVECVE-2026-35489: Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`https://agentprime.io/advisories/CVE-2026-35489/https://agentprime.io/advisories/CVE-2026-35489/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:53:18 GMTCVECVE-2026-35488: Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) usershttps://agentprime.io/advisories/CVE-2026-35488/https://agentprime.io/advisories/CVE-2026-35488/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:51:25 GMTCVECVE-2026-35046: Tandoor has a Stored CSS Injection via <style> Tag in Recipe Instructions (API-Level)https://agentprime.io/advisories/CVE-2026-35046/https://agentprime.io/advisories/CVE-2026-35046/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 17:20:00 GMTCVECVE-2026-35045: Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modificationhttps://agentprime.io/advisories/CVE-2026-35045/https://agentprime.io/advisories/CVE-2026-35045/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 17:17:57 GMTCVECVE-2026-33152: Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthenticationhttps://agentprime.io/advisories/CVE-2026-33152/https://agentprime.io/advisories/CVE-2026-33152/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:07:39 GMTCVEcriticalCVE-2026-33153: Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logichttps://agentprime.io/advisories/CVE-2026-33153/https://agentprime.io/advisories/CVE-2026-33153/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:06:16 GMTCVECVE-2026-33148: URL Parameter Injection in FDC Food Search API Causes Server Crash and Exposes Internal API Keyhttps://agentprime.io/advisories/CVE-2026-33148/https://agentprime.io/advisories/CVE-2026-33148/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:04:25 GMTCVECVE-2026-29055: Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PIIhttps://agentprime.io/advisories/CVE-2026-29055/https://agentprime.io/advisories/CVE-2026-29055/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 19:03:06 GMTCVECVE-2026-28503: Tandoor Recipes has Cross-Space IDOR in SyncViewSet.query_synced_folder: missing space scoping on get_object_or_404https://agentprime.io/advisories/CVE-2026-28503/https://agentprime.io/advisories/CVE-2026-28503/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 18:55:53 GMTCVECVE-2026-33149: Tandoor Recipes Vulnerable to Host Header Injectionhttps://agentprime.io/advisories/CVE-2026-33149/https://agentprime.io/advisories/CVE-2026-33149/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 18:53:22 GMTCVECVE-2026-25991: Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Importhttps://agentprime.io/advisories/CVE-2026-25991/https://agentprime.io/advisories/CVE-2026-25991/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Feb 2026 18:29:10 GMTCVECVE-2026-25964: Tandoor Recipes Affected by Authenticated Local File Disclosure (LFD) via Recipe Import leads to Arbitrary File Readhttps://agentprime.io/advisories/CVE-2026-25964/https://agentprime.io/advisories/CVE-2026-25964/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Feb 2026 18:27:08 GMTCVECVE-2025-23213: Tandoor Recipes - Stored XSS through Unrestricted File Uploadhttps://agentprime.io/advisories/CVE-2025-23213/https://agentprime.io/advisories/CVE-2025-23213/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jan 2025 15:31:19 GMTCVECVE-2025-23212: Tandoor Recipes - Local file disclosure - Users can read the content of any file on the serverhttps://agentprime.io/advisories/CVE-2025-23212/https://agentprime.io/advisories/CVE-2025-23212/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jan 2025 15:29:07 GMTCVECVE-2025-23211: Tandoor Recipes - SSTI - Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-23211/https://agentprime.io/advisories/CVE-2025-23211/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jan 2025 15:24:27 GMTCVEcriticalCVE-2024-0403: Recipes 1.5.10 - Blind SSRFhttps://agentprime.io/advisories/CVE-2024-0403/https://agentprime.io/advisories/CVE-2024-0403/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Feb 2024 23:31:15 GMTCVECVE-2022-23074: Recipes - Stored XSS in Name Parameterhttps://agentprime.io/advisories/CVE-2022-23074/https://agentprime.io/advisories/CVE-2022-23074/Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jun 2022 09:20:10 GMTCVECVE-2022-23073: Recipes - Stored XSS in Clipboardhttps://agentprime.io/advisories/CVE-2022-23073/https://agentprime.io/advisories/CVE-2022-23073/Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jun 2022 08:50:09 GMTCVECVE-2022-23072: Recipes - Stored XSS in Add to Carthttps://agentprime.io/advisories/CVE-2022-23072/https://agentprime.io/advisories/CVE-2022-23072/Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jun 2022 08:10:11 GMTCVECVE-2022-23071: Recipes - SSRF on Importhttps://agentprime.io/advisories/CVE-2022-23071/https://agentprime.io/advisories/CVE-2022-23071/Published by the CVE Program. Not analysed by agentprime yet.Sun, 19 Jun 2022 10:15:14 GMTCVE