CVE-2026-25991 | Tandoor Recipes up to 2.5.0 Cookmate Integration cookmate.py server-side request forgery (GHSA-j6xg-85mh-qqf7)

A vulnerability identified as critical has been detected in Tandoor Recipes up to 2.5.0. The impacted element is an unknown function of the file cookbook/integration/cookmate.py of the component Cookmate Integration. The manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-25991. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.