Login Request a demo
ME
Product
mealie
by mealie-recipes · last CVE Oct 10, 2026
7
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 2
Severity
All severities7Critical0High0Medium5Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mealie to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31994
6.5
0%
Apr 19
Mealie vulnerable to a DoS in recipe image importer (GHSL-2023-228)
Affected: < 1.4.0
CVE-2024-31992
6.5
1%
Apr 19
Mealie contains a DoS vulnerability in recipe importer
Affected: < 1.4.0
CVE-2026-71210
5.3
0%
Aug 5
mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access
Affected: 0
CVE-2024-31993
4.5
0%
Apr 19
Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227)
Affected: < 1.4.0
CVE-2026-93736
4.3
0%
Sep 18
Mealie before 3.21.0 Information Disclosure via Ratings Endpoint
Affected: before 3.21.0
CVE-2026-108594
3.5
0%
Oct 10
Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch
Affected: 3.26.0 through 3.28.0
CVE-2024-31991
3.5
0%
Apr 19
Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225)
Affected: < 1.4.0
Showing 7