CVE-2022-32425: Mealie

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.

Affected products

• Mealie Mealie: version 1.0.0 only

Published 2022-07-14. Last modified 2026-06-17.