CVE-2026-115810

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810 Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

CVE-2026-115810

Tandoor Recipes versions before 2.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the Pestle importer . The root cause is located in cookbook/integration/pestle.py, where the application performs a requests.get call that bypasses the centralized requests-hardened S...

EUVD-2026-109097

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...

PT-2026-122152

Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arbitrary internal or external hosts by crafting a malicious image URL in a Pestle JSON import file...