CVE-2022-34625: Mealie Project Mealie

High severity, CVSS 7.2. EPSS: 2.9% chance of exploitation in the next 30 days.

Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code via a crafted Jinja2 template.

Affected products

• Mealie Project Mealie: version 1.0.0 only

Published 2022-08-02. Last modified 2026-06-17.