cve.bz

CVE-2025-23211

9.9 criticalEPSS 3.6%

Critical (9.9) in tandoor recipes. EPSS 3.6% chance of exploitation in the next 30 days.

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.

Severity

CVSS 3.1

9.9 critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWEs
CWE-94, CWE-1336
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON