PT-2026-32018 · Unknown · Tandoor Recipes

Minato500 · CVE-2026-27460 · Published 2026-04-10 · Updated 2026-04-11

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions prior to 2.6.5

Description Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to version 2.6.5, a Denial of Service (DoS) issue exists in the recipe import functionality. An authenticated user can cause a server crash or significant performance degradation by uploading a large ZIP file (ZIP Bomb).

Recommendations Update to version 2.6.5 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-409

Related Identifiers

CVE-2026-27460

GHSA-W8PQ-4PWF-R2M8

Affected Products

Tandoor Recipes

References · 6

• 🔥 https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-w8pq-4pwf-r2m8 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27460.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-27460 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27460 · Vendor Advisory
• https://twitter.com/CVEnew/status/2042710187975311418 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042771725356581003 · Twitter Post