Tandoor Recipes: Private recipe authorization bypass via /api/step/ - read and modify another Space member's private recipe content

Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users

Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modification

Tandoor Recipes Vulnerable to Host Header Injection

Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL

Tandoor Recipes: Blind SSRF via AI provider URL (api_base)

Tandoor Recipes affected by Blind SSRF with Internal Network Access via Recipe Import

Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication

Tandoor Recipes — `amount`/`unit` bypass serializer in `food/{id}/shopping/`

Tandoor Recipes: Private recipe file and share-link authorization bypass in recipe utility API endpoints