mealie-recipes Mealie

• CVE-2026-108594 Low 3.5 Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch 0.2%
• CVE-2026-94028 Medium 4.3 mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery 0.4%
• CVE-2026-93736 Medium 4.3 Mealie before 3.21.0 Information Disclosure via Ratings Endpoint 0.4%
• CVE-2026-71210 Medium 5.3 mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access 0.2%
• CVE-2024-31994 Medium 6.5 Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228) 0.3%
• CVE-2024-31993 Medium 6.2 Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227) 0.4%
• CVE-2024-31992 Medium 6.5 Mealie contains a DoS vulnerability in recipe importer 0.7%
• CVE-2024-31991 Medium 4.1 Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225) 0.3%