TandoorRecipes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH TandoorRecipes CVE published 2026-10-16

CVE-2026-59963

CVE-2026-59963 is a high-severity vulnerability in Tandoor Recipes, an application for managing recipes, planning meals, and building shopping lists. The issue allows authenticated members of a shared Space to access private recipe files and sensitive uploaded content belonging to other members of the same Space. This is possible because certain endpoints, including those for AI import, file retrieval, ex [truncated]