tandoor_recipes vulnerabilities

CVEs whose affected-version data names the tandoor_recipes package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112342High· 7.1

2d ago

Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed on…

▾ TwilightTandoor Recipes · Tandoor Recipesvia CVEORG