Vulnerabilities in TandoorRecipes
23 resultsCVE-2026-35489HIGHTandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`EPSS 0.2%CVE-2026-59963HIGHTandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpointsEPSS 0.2%CVE-2026-35046MEDIUMTandoor has a Stored CSS Injection via <style> Tag in Recipe Instructions (API-Level)EPSS 0.2%