High severity7.2NVD Advisory· Published Aug 2, 2022· Updated Jun 17, 2026

CVE-2022-34625

Description

Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code via a crafted Jinja2 template.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mealie/Mealiecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.0.0beta3

Patches

Vulnerability mechanics

References

gainsec.com/2022/08/02/cve-2022-34625-ssti-rce-mealie/nvdExploitThird Party Advisory
cwe.mitre.org/data/definitions/1336.htmlnvdThird Party Advisory
cwe.mitre.org/data/definitions/94.htmlnvdThird Party Advisory
docs.mealie.io/changelog/v0.5.6/nvdRelease NotesVendor Advisory
hub.docker.com/r/hkotel/mealienvdProduct

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000