What’s Vulnerable › Products

mealie-recipes mealie vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your mealie-recipes mealie version is affected

Latest mealie-recipes mealie vulnerabilities

• CVE-2026-108594 — Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch (CVSS 3.5)
• CVE-2026-94028 — mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery (CVSS 4.3)
• CVE-2026-93736 — Mealie before 3.21.0 Information Disclosure via Ratings Endpoint (CVSS 4.3)
• CVE-2026-71210 — mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access (CVSS 5.3)
• CVE-2025-70297 — (CVSS 6.1)
• CVE-2025-70296 — (CVSS 5.4)
• CVE-2025-56795 — (CVSS 9.0)
• CVE-2024-55070 — (CVSS 3.1)
• CVE-2024-55073 — (CVSS 7.6)
• CVE-2024-55072 — (CVSS 5.4)
• CVE-2024-31994 — Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228) (CVSS 6.5)
• CVE-2024-31993 — Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227) (CVSS 4.5)
• CVE-2024-31992 — Mealie contains a DoS vulnerability in recipe importer (CVSS 6.5)
• CVE-2024-31991 — Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225) (CVSS 3.5)
• CVE-2022-34624 — (CVSS 5.9)
• CVE-2022-34621 — (CVSS 6.5)
• CVE-2022-34615 — (CVSS 9.8)
• CVE-2022-32425 — (CVSS 5.3)