Vulnerabilities

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, s

Read at NIST National Vulnerability Database (CVE API 2.0)

CVSS

7.1

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-59963 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 29d ago

   Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.

   CVSS 8.1 CVE-2026-61726
2. 15
   CVE NVD 29d ago

   Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.

   CVSS 7.7 CVE-2026-59970 Oracle
3. 3
   CVE NVD 29d ago

   Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.

   CVSS 5.7 CVE-2026-59966