GCVE - cpe:2.3:a:mealie:mealie:2.2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mealie:mealie:2.2.0:*:*:*:*:*:*:*

part: a version: 2.2.0 update: *

Vendor	Mealie (`deedb98d-d6da-51d3-887c-15170e4aa3c0`)
Product	Mealie (`754b99b5-f07b-5254-a34d-31292521a3c8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/hkotel/mealie`	purl2cpe	2026-06-01 10:16:52.122098
`pkg:github/hay-kot/mealie`	purl2cpe	2026-06-01 10:16:52.122099

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-55073`	vulnerable	2026-06-08 06:54:16.926710	Details available A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household. Published: 2025-03-27T00:00:00.000Z Updated: 2025-03-27T19:56:39.882Z Open on db.gcve.eu Reference links https://github.com/mealie-recipes/mealie/issues/4593 https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55072`	vulnerable	2026-06-08 06:54:16.926317	Details available A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household. Published: 2025-03-27T00:00:00.000Z Updated: 2025-03-27T19:56:11.179Z Open on db.gcve.eu Reference links https://github.com/mealie-recipes/mealie/issues/4593 https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55070`	vulnerable	2026-06-08 06:54:16.925819	Details available A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions. Published: 2025-03-27T00:00:00.000Z Updated: 2025-03-27T20:09:47.169Z Open on db.gcve.eu Reference links https://github.com/mealie-recipes/mealie/issues/4593 https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Mealie 2.2.0

Notes

PURL mappings

Vulnerability references

Contribute