Sencho vulnerabilities
CVEs whose affected-version data names the Sencho package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-108523Medium· 4.3PoCA vulnerability was determined in Studio-Saelix Sencho up to 0.94.1
A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_ur…
CVE-2026-108522High· 8.3PoCA vulnerability was found in Studio-Saelix Sencho up to 0.94.1
A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authe…
CVE-2026-108521Medium· 4.7PoCA vulnerability has been found in Studio-Saelix Sencho up to 0.97.1
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation lea…