CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-35046

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, Tandoor Recipes allows authenticated users to inject arbitrary <style> tags into recipe step instructions. The bleach.clean() sanitizer explicitly whitelists the <style> tag, causing the backend to persist and serve unsanitized CSS payloads via the API. Any client consuming instructions_markdown from the API and rendering it as HTML without additional sanitization will execute attacker-controlled CSS — enabling UI redressing, phishing overlays, visual defacement, and CSS-based data exfiltration. This vulnerability is fixed in 2.6.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 8.2%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2026-35046

Tandoor » Recipes » Version: 0.1.0

cpe:2.3:a:tandoor:recipes:0.1.0
Tandoor » Recipes » Version: 0.10.0

cpe:2.3:a:tandoor:recipes:0.10.0
Tandoor » Recipes » Version: 0.10.1

cpe:2.3:a:tandoor:recipes:0.10.1
Tandoor » Recipes » Version: 0.11.0

cpe:2.3:a:tandoor:recipes:0.11.0
Tandoor » Recipes » Version: 0.11.1

cpe:2.3:a:tandoor:recipes:0.11.1
Tandoor » Recipes » Version: 0.11.2

cpe:2.3:a:tandoor:recipes:0.11.2
Tandoor » Recipes » Version: 0.12.0

cpe:2.3:a:tandoor:recipes:0.12.0
Tandoor » Recipes » Version: 0.12.1

cpe:2.3:a:tandoor:recipes:0.12.1
Tandoor » Recipes » Version: 0.13.0

cpe:2.3:a:tandoor:recipes:0.13.0
Tandoor » Recipes » Version: 0.14.0

cpe:2.3:a:tandoor:recipes:0.14.0
Tandoor » Recipes » Version: 0.14.1

cpe:2.3:a:tandoor:recipes:0.14.1
Tandoor » Recipes » Version: 0.14.2

cpe:2.3:a:tandoor:recipes:0.14.2
Tandoor » Recipes » Version: 0.14.3

cpe:2.3:a:tandoor:recipes:0.14.3
Tandoor » Recipes » Version: 0.14.4

cpe:2.3:a:tandoor:recipes:0.14.4
Tandoor » Recipes » Version: 0.14.5

cpe:2.3:a:tandoor:recipes:0.14.5
Tandoor » Recipes » Version: 0.15.0

cpe:2.3:a:tandoor:recipes:0.15.0
Tandoor » Recipes » Version: 0.15.1

cpe:2.3:a:tandoor:recipes:0.15.1
Tandoor » Recipes » Version: 0.15.2

cpe:2.3:a:tandoor:recipes:0.15.2
Tandoor » Recipes » Version: 0.16.0

cpe:2.3:a:tandoor:recipes:0.16.0
Tandoor » Recipes » Version: 0.16.1

cpe:2.3:a:tandoor:recipes:0.16.1
Tandoor » Recipes » Version: 0.16.2

cpe:2.3:a:tandoor:recipes:0.16.2
Tandoor » Recipes » Version: 0.16.3

cpe:2.3:a:tandoor:recipes:0.16.3
Tandoor » Recipes » Version: 0.16.4

cpe:2.3:a:tandoor:recipes:0.16.4
Tandoor » Recipes » Version: 0.16.5

cpe:2.3:a:tandoor:recipes:0.16.5
Tandoor » Recipes » Version: 0.16.6

cpe:2.3:a:tandoor:recipes:0.16.6
Tandoor » Recipes » Version: 0.16.7

cpe:2.3:a:tandoor:recipes:0.16.7
Tandoor » Recipes » Version: 0.16.8

cpe:2.3:a:tandoor:recipes:0.16.8
Tandoor » Recipes » Version: 0.17.0

cpe:2.3:a:tandoor:recipes:0.17.0
Tandoor » Recipes » Version: 0.17.1

cpe:2.3:a:tandoor:recipes:0.17.1
Tandoor » Recipes » Version: 0.17.2

cpe:2.3:a:tandoor:recipes:0.17.2
Tandoor » Recipes » Version: 0.17.3

cpe:2.3:a:tandoor:recipes:0.17.3
Tandoor » Recipes » Version: 0.17.4

cpe:2.3:a:tandoor:recipes:0.17.4
Tandoor » Recipes » Version: 0.18.0

cpe:2.3:a:tandoor:recipes:0.18.0
Tandoor » Recipes » Version: 0.2.0

cpe:2.3:a:tandoor:recipes:0.2.0
Tandoor » Recipes » Version: 0.2.1

cpe:2.3:a:tandoor:recipes:0.2.1
Tandoor » Recipes » Version: 0.2.2

cpe:2.3:a:tandoor:recipes:0.2.2
Tandoor » Recipes » Version: 0.3.0

cpe:2.3:a:tandoor:recipes:0.3.0
Tandoor » Recipes » Version: 0.3.1

cpe:2.3:a:tandoor:recipes:0.3.1
Tandoor » Recipes » Version: 0.3.2

cpe:2.3:a:tandoor:recipes:0.3.2
Tandoor » Recipes » Version: 0.4.0

cpe:2.3:a:tandoor:recipes:0.4.0
Tandoor » Recipes » Version: 0.5.0

cpe:2.3:a:tandoor:recipes:0.5.0
Tandoor » Recipes » Version: 0.5.1

cpe:2.3:a:tandoor:recipes:0.5.1
Tandoor » Recipes » Version: 0.6.0

cpe:2.3:a:tandoor:recipes:0.6.0
Tandoor » Recipes » Version: 0.6.1

cpe:2.3:a:tandoor:recipes:0.6.1
Tandoor » Recipes » Version: 0.6.2

cpe:2.3:a:tandoor:recipes:0.6.2
Tandoor » Recipes » Version: 0.6.3

cpe:2.3:a:tandoor:recipes:0.6.3
Tandoor » Recipes » Version: 0.6.4

cpe:2.3:a:tandoor:recipes:0.6.4
Tandoor » Recipes » Version: 0.6.5

cpe:2.3:a:tandoor:recipes:0.6.5
Tandoor » Recipes » Version: 0.7.0

cpe:2.3:a:tandoor:recipes:0.7.0
Tandoor » Recipes » Version: 0.7.1

cpe:2.3:a:tandoor:recipes:0.7.1
Tandoor » Recipes » Version: 0.8.0

cpe:2.3:a:tandoor:recipes:0.8.0
Tandoor » Recipes » Version: 0.8.1

cpe:2.3:a:tandoor:recipes:0.8.1
Tandoor » Recipes » Version: 0.8.2

cpe:2.3:a:tandoor:recipes:0.8.2
Tandoor » Recipes » Version: 0.8.3

cpe:2.3:a:tandoor:recipes:0.8.3
Tandoor » Recipes » Version: 0.8.4

cpe:2.3:a:tandoor:recipes:0.8.4
Tandoor » Recipes » Version: 0.9.0

cpe:2.3:a:tandoor:recipes:0.9.0
Tandoor » Recipes » Version: 0.9.1

cpe:2.3:a:tandoor:recipes:0.9.1
Tandoor » Recipes » Version: 0.9.2

cpe:2.3:a:tandoor:recipes:0.9.2
Tandoor » Recipes » Version: 1.0.0

cpe:2.3:a:tandoor:recipes:1.0.0
Tandoor » Recipes » Version: 1.0.1

cpe:2.3:a:tandoor:recipes:1.0.1
Tandoor » Recipes » Version: 1.0.2

cpe:2.3:a:tandoor:recipes:1.0.2
Tandoor » Recipes » Version: 1.0.3

cpe:2.3:a:tandoor:recipes:1.0.3
Tandoor » Recipes » Version: 1.0.4

cpe:2.3:a:tandoor:recipes:1.0.4
Tandoor » Recipes » Version: 1.0.4.1

cpe:2.3:a:tandoor:recipes:1.0.4.1
Tandoor » Recipes » Version: 1.0.5

cpe:2.3:a:tandoor:recipes:1.0.5
Tandoor » Recipes » Version: 1.0.5.1

cpe:2.3:a:tandoor:recipes:1.0.5.1
Tandoor » Recipes » Version: 1.0.5.2

cpe:2.3:a:tandoor:recipes:1.0.5.2
Tandoor » Recipes » Version: 1.0.6

cpe:2.3:a:tandoor:recipes:1.0.6
Tandoor » Recipes » Version: 1.0.7

cpe:2.3:a:tandoor:recipes:1.0.7
Tandoor » Recipes » Version: 1.0.8

cpe:2.3:a:tandoor:recipes:1.0.8
Tandoor » Recipes » Version: 1.1.0

cpe:2.3:a:tandoor:recipes:1.1.0
Tandoor » Recipes » Version: 1.1.1

cpe:2.3:a:tandoor:recipes:1.1.1
Tandoor » Recipes » Version: 1.1.2

cpe:2.3:a:tandoor:recipes:1.1.2
Tandoor » Recipes » Version: 1.1.3

cpe:2.3:a:tandoor:recipes:1.1.3
Tandoor » Recipes » Version: 1.1.4

cpe:2.3:a:tandoor:recipes:1.1.4
Tandoor » Recipes » Version: 1.2.0

cpe:2.3:a:tandoor:recipes:1.2.0
Tandoor » Recipes » Version: 1.2.1

cpe:2.3:a:tandoor:recipes:1.2.1
Tandoor » Recipes » Version: 1.2.2

cpe:2.3:a:tandoor:recipes:1.2.2
Tandoor » Recipes » Version: 1.2.3

cpe:2.3:a:tandoor:recipes:1.2.3
Tandoor » Recipes » Version: 1.2.4

cpe:2.3:a:tandoor:recipes:1.2.4
Tandoor » Recipes » Version: 1.2.5

cpe:2.3:a:tandoor:recipes:1.2.5
Tandoor » Recipes » Version: 1.2.6

cpe:2.3:a:tandoor:recipes:1.2.6
Tandoor » Recipes » Version: 1.2.7

cpe:2.3:a:tandoor:recipes:1.2.7
Tandoor » Recipes » Version: 1.3.0

cpe:2.3:a:tandoor:recipes:1.3.0
Tandoor » Recipes » Version: 1.3.1

cpe:2.3:a:tandoor:recipes:1.3.1
Tandoor » Recipes » Version: 1.3.2

cpe:2.3:a:tandoor:recipes:1.3.2
Tandoor » Recipes » Version: 1.3.3

cpe:2.3:a:tandoor:recipes:1.3.3
Tandoor » Recipes » Version: 1.4.0

cpe:2.3:a:tandoor:recipes:1.4.0
Tandoor » Recipes » Version: 1.4.1

cpe:2.3:a:tandoor:recipes:1.4.1
Tandoor » Recipes » Version: 1.4.10

cpe:2.3:a:tandoor:recipes:1.4.10
Tandoor » Recipes » Version: 1.4.11

cpe:2.3:a:tandoor:recipes:1.4.11
Tandoor » Recipes » Version: 1.4.12

cpe:2.3:a:tandoor:recipes:1.4.12
Tandoor » Recipes » Version: 1.4.2

cpe:2.3:a:tandoor:recipes:1.4.2
Tandoor » Recipes » Version: 1.4.3

cpe:2.3:a:tandoor:recipes:1.4.3
Tandoor » Recipes » Version: 1.4.4

cpe:2.3:a:tandoor:recipes:1.4.4
Tandoor » Recipes » Version: 1.4.5

cpe:2.3:a:tandoor:recipes:1.4.5
Tandoor » Recipes » Version: 1.4.6

cpe:2.3:a:tandoor:recipes:1.4.6
Tandoor » Recipes » Version: 1.4.7

cpe:2.3:a:tandoor:recipes:1.4.7
Tandoor » Recipes » Version: 1.4.8

cpe:2.3:a:tandoor:recipes:1.4.8
Tandoor » Recipes » Version: 1.4.9

cpe:2.3:a:tandoor:recipes:1.4.9
Tandoor » Recipes » Version: 1.5.0

cpe:2.3:a:tandoor:recipes:1.5.0
Tandoor » Recipes » Version: 1.5.1

cpe:2.3:a:tandoor:recipes:1.5.1
Tandoor » Recipes » Version: 1.5.10

cpe:2.3:a:tandoor:recipes:1.5.10
Tandoor » Recipes » Version: 1.5.11

cpe:2.3:a:tandoor:recipes:1.5.11
Tandoor » Recipes » Version: 1.5.12

cpe:2.3:a:tandoor:recipes:1.5.12
Tandoor » Recipes » Version: 1.5.13

cpe:2.3:a:tandoor:recipes:1.5.13
Tandoor » Recipes » Version: 1.5.14

cpe:2.3:a:tandoor:recipes:1.5.14
Tandoor » Recipes » Version: 1.5.15

cpe:2.3:a:tandoor:recipes:1.5.15
Tandoor » Recipes » Version: 1.5.16

cpe:2.3:a:tandoor:recipes:1.5.16
Tandoor » Recipes » Version: 1.5.17

cpe:2.3:a:tandoor:recipes:1.5.17
Tandoor » Recipes » Version: 1.5.18

cpe:2.3:a:tandoor:recipes:1.5.18
Tandoor » Recipes » Version: 1.5.19

cpe:2.3:a:tandoor:recipes:1.5.19
Tandoor » Recipes » Version: 1.5.2

cpe:2.3:a:tandoor:recipes:1.5.2
Tandoor » Recipes » Version: 1.5.20

cpe:2.3:a:tandoor:recipes:1.5.20
Tandoor » Recipes » Version: 1.5.21

cpe:2.3:a:tandoor:recipes:1.5.21
Tandoor » Recipes » Version: 1.5.22

cpe:2.3:a:tandoor:recipes:1.5.22
Tandoor » Recipes » Version: 1.5.23

cpe:2.3:a:tandoor:recipes:1.5.23
Tandoor » Recipes » Version: 1.5.24

cpe:2.3:a:tandoor:recipes:1.5.24
Tandoor » Recipes » Version: 1.5.25

cpe:2.3:a:tandoor:recipes:1.5.25
Tandoor » Recipes » Version: 1.5.26

cpe:2.3:a:tandoor:recipes:1.5.26
Tandoor » Recipes » Version: 1.5.27

cpe:2.3:a:tandoor:recipes:1.5.27
Tandoor » Recipes » Version: 1.5.28

cpe:2.3:a:tandoor:recipes:1.5.28
Tandoor » Recipes » Version: 1.5.29

cpe:2.3:a:tandoor:recipes:1.5.29
Tandoor » Recipes » Version: 1.5.3

cpe:2.3:a:tandoor:recipes:1.5.3
Tandoor » Recipes » Version: 1.5.30

cpe:2.3:a:tandoor:recipes:1.5.30
Tandoor » Recipes » Version: 1.5.31

cpe:2.3:a:tandoor:recipes:1.5.31
Tandoor » Recipes » Version: 1.5.32

cpe:2.3:a:tandoor:recipes:1.5.32
Tandoor » Recipes » Version: 1.5.33

cpe:2.3:a:tandoor:recipes:1.5.33
Tandoor » Recipes » Version: 1.5.35

cpe:2.3:a:tandoor:recipes:1.5.35
Tandoor » Recipes » Version: 1.5.4

cpe:2.3:a:tandoor:recipes:1.5.4
Tandoor » Recipes » Version: 1.5.5

cpe:2.3:a:tandoor:recipes:1.5.5
Tandoor » Recipes » Version: 1.5.6

cpe:2.3:a:tandoor:recipes:1.5.6
Tandoor » Recipes » Version: 1.5.7

cpe:2.3:a:tandoor:recipes:1.5.7
Tandoor » Recipes » Version: 1.5.8

cpe:2.3:a:tandoor:recipes:1.5.8
Tandoor » Recipes » Version: 1.5.9

cpe:2.3:a:tandoor:recipes:1.5.9
Tandoor » Recipes » Version: 2.0.0

cpe:2.3:a:tandoor:recipes:2.0.0
Tandoor » Recipes » Version: 2.0.1

cpe:2.3:a:tandoor:recipes:2.0.1
Tandoor » Recipes » Version: 2.0.2

cpe:2.3:a:tandoor:recipes:2.0.2
Tandoor » Recipes » Version: 2.0.3

cpe:2.3:a:tandoor:recipes:2.0.3
Tandoor » Recipes » Version: 2.1.0

cpe:2.3:a:tandoor:recipes:2.1.0
Tandoor » Recipes » Version: 2.1.1

cpe:2.3:a:tandoor:recipes:2.1.1
Tandoor » Recipes » Version: 2.1.2

cpe:2.3:a:tandoor:recipes:2.1.2
Tandoor » Recipes » Version: 2.2.0

cpe:2.3:a:tandoor:recipes:2.2.0
Tandoor » Recipes » Version: 2.2.1

cpe:2.3:a:tandoor:recipes:2.2.1
Tandoor » Recipes » Version: 2.2.2

cpe:2.3:a:tandoor:recipes:2.2.2
Tandoor » Recipes » Version: 2.2.3

cpe:2.3:a:tandoor:recipes:2.2.3
Tandoor » Recipes » Version: 2.2.4

cpe:2.3:a:tandoor:recipes:2.2.4
Tandoor » Recipes » Version: 2.2.5

cpe:2.3:a:tandoor:recipes:2.2.5
Tandoor » Recipes » Version: 2.2.6

cpe:2.3:a:tandoor:recipes:2.2.6
Tandoor » Recipes » Version: 2.2.7

cpe:2.3:a:tandoor:recipes:2.2.7
Tandoor » Recipes » Version: 2.3.0

cpe:2.3:a:tandoor:recipes:2.3.0
Tandoor » Recipes » Version: 2.3.1

cpe:2.3:a:tandoor:recipes:2.3.1
Tandoor » Recipes » Version: 2.3.2

cpe:2.3:a:tandoor:recipes:2.3.2
Tandoor » Recipes » Version: 2.3.3

cpe:2.3:a:tandoor:recipes:2.3.3
Tandoor » Recipes » Version: 2.3.4

cpe:2.3:a:tandoor:recipes:2.3.4
Tandoor » Recipes » Version: 2.3.5

cpe:2.3:a:tandoor:recipes:2.3.5
Tandoor » Recipes » Version: 2.3.6

cpe:2.3:a:tandoor:recipes:2.3.6
Tandoor » Recipes » Version: 2.4.0

cpe:2.3:a:tandoor:recipes:2.4.0
Tandoor » Recipes » Version: 2.4.1

cpe:2.3:a:tandoor:recipes:2.4.1
Tandoor » Recipes » Version: 2.4.2

cpe:2.3:a:tandoor:recipes:2.4.2
Tandoor » Recipes » Version: 2.5.0

cpe:2.3:a:tandoor:recipes:2.5.0
Tandoor » Recipes » Version: 2.5.1

cpe:2.3:a:tandoor:recipes:2.5.1
Tandoor » Recipes » Version: 2.5.2

cpe:2.3:a:tandoor:recipes:2.5.2
Tandoor » Recipes » Version: 2.5.3

cpe:2.3:a:tandoor:recipes:2.5.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-35046

Products

Pricing

Contact Us