CVE-2026-59966

Prior to version 2.6.10 , Tandoor Recipes is vulnerable to a Regular Expression Denial of Service (ReDoS) . The application executes user-controlled Automation regular-expression patterns using Python's re.sub() without complexity validation or execution timeouts. An authenticated user can store ...