CVE-2026-71210

Mealie is affected by a DNS-rebinding TOCTOU in its AsyncSafeTransport SSRF guard. The guard validates a target host by resolving its IP once and checking private-range rules, but the actual outbound request is issued using the original hostname, which is re-resolved by the underlying transport. ...