Tandoor CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Tandoor CVE published 2026-04-06

CVE-2026-35045

CVE-2026-35045 is a high-severity vulnerability in Tandoor Recipes, an application for managing recipes, planning meals, and building shopping lists. The vulnerability exists in the PUT /api/recipe/batch_update/ endpoint, allowing any authenticated user within a Space to modify any recipe in that Space, including recipes marked as private by other users. This bypasses object-level authorization checks, en [truncated]