Vulnerabilities
Summary — last 7 days
New vulnerabilities4,609▼ 741 vs. last week
Critical / high1,814▼ 1,268 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)745▲ 642 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Low (2.1) | 0.26% | — | Studio-saelix SenchoAI | 10/11/2026 | 10/13/2026 | A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from… | |
| Deferred | Medium (5.5) | 0.42% | — | Studio-saelix SenchoAI | 10/11/2026 | 10/14/2026 | A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been… | |
| Deferred | Low (2) | 0.22% | — | Studio-saelix SenchoAI | 10/11/2026 | 10/13/2026 | A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The… |