getsentry

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

getsentry records in CISA KEV

No getsentry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Raven-ruby 1 record LOW

Records

29 records

TI-2026-21018 CVE-2026-26004

Sentry allows unauthorized access to event data across organizational boundaries

MEDIUM 59

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00256 Published 2026-03-17 Fixed in 26.1.0 CWE-639

TI-2026-30656 CVE-2026-42354 · GHSA-rcmw-7mc7-3rj7

Sentry: Improper authentication on SAML SSO process allows user identity linking

MEDIUM 50

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2026-05-08 Fixed in 26.4.1 CWE-290

TI-2026-78982 CVE-2026-114139 · GHSA-mchm-gjx6-7h55

Sentry-Javascript: Middleware Bypass when using Tunnel route

MEDIUM 48

Sentry-Javascript is an official Sentry SDKs for JavaScript.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0051 Published 2026-10-21 Fixed in 9.47.2, 10.75.2 +1 CWE-693

TI-2025-16094 CVE-2025-22146 · GHSA-7pq6-v88g-wf3w

Improper authentication on SAML SSO process allows user impersonation in sentry

MEDIUM 48

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00615 Published 2025-01-15 Fixed in 25.1.0 CWE-287

TI-2023-25212 CVE-2023-46729 · GHSA-2rmr-xw8m-22q9

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

MEDIUM 43

sentry-javascript provides Sentry SDKs for JavaScript.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00631 Published 2023-11-10 Fixed in 7.77.0 CWE-918

TI-2026-21634 CVE-2026-27197 · GHSA-ggmg-cqg6-j45g

Sentry: Improper Authentication on SAML SSO process allows user identity linking

MEDIUM 42

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-02-21 Fixed in 26.2.0 CWE-287

TI-2026-37904 CVE-2026-52794

Sentry: Inefficient Regular Expression Complexity in sentry

MEDIUM 40

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-06-24 Fixed in 26.5.2 CWE-1333

TI-2023-20488 CVE-2023-39349 · GHSA-9jcq-jf57-c62c

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

LOW 39

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01056 Published 2023-08-07 Fixed in 23.7.2 CWE-284

TI-2026-57729 CVE-2026-83803

Sentry: Unsafe pickle deserialization in Relocation Feature

LOW 37

Sentry is an error tracking and performance monitoring tool.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00605 Published 2026-09-22 Fixed in 26.7.0 CWE-502

TI-2026-74408 CVE-2026-102899

Sentry: Improper authentication on SAML SSO process allows user identity linking

LOW 35

Sentry is an application monitoring and error tracking platform.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00364 Published 2026-10-14 Fixed in 26.7.2 CWE-287

TI-2023-18620 CVE-2023-36826 · GHSA-m4hc-m2v6-hfw8

Sentry vulnerable to improper authorization on debug and artifact file downloads

LOW 35

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00634 Published 2023-07-25 Fixed in 23.5.2 CWE-285

TI-2024-27719 CVE-2024-41656 · GHSA-fm88-hc3v-3www

Sentry vulnerable to stored Cross-Site Scripting (XSS)

LOW 34

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00467 Published 2024-07-23 Fixed in 24.7.1 CWE-79

TI-2023-27477 CVE-2023-50249 · GHSA-x3v3-8xg8-8v72

Sentry's Astro SDK vulnerable to ReDoS

LOW 34

Sentry-Javascript is official Sentry SDKs for JavaScript.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-12-20 Fixed in 7.87.0 CWE-400

TI-2023-12696 CVE-2023-28117 · GHSA-29pr-6jr8-q5jm

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

LOW 34

Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00647 Published 2023-03-22 Fixed in 1.14.0 CWE-201

TI-2023-18623 CVE-2023-36829 · GHSA-4xqm-4p72-87h6

Sentry CORS misconfiguration vulnerability

LOW 33

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00666 Published 2023-07-06 Fixed in 23.6.2 CWE-863

TI-2024-21368 CVE-2024-32474 · GHSA-6cjm-4pxw-7xp9

Sentry's superuser cleartext password leaked in logs

LOW 32

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00428 Published 2024-04-18 Fixed in 24.4.1 CWE-117

TI-2024-35717 CVE-2024-53253 · GHSA-v5h2-q2w4-gpcx

Sentry's improper error handling leaks Application Integration Client Secret

LOW 31

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00645 Published 2024-11-22 Fixed in 24.11.1 CWE-209

TI-2024-30625 CVE-2024-45606 · GHSA-v345-w9f2-mpm5

Improper authorization on muting of alert rules in sentry

LOW 31

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2023-20663 CVE-2023-39531 · GHSA-hgj4-h2x3-rfx4

Sentry vulnerable to incorrect credential validation on OAuth token requests

LOW 30

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00356 Published 2023-08-09 Fixed in 23.7.2 CWE-287

TI-2024-30624 CVE-2024-45605 · GHSA-54m3-95j9-v89j

Improper authorization on deletion of user issue alert notifications in sentry

LOW 29

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00386 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2022-07545 CVE-2022-23485 · GHSA-jv85-mqxj-3f9j

Invite code reuse via cookie manipulation in sentry

LOW 29

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00451 Published 2022-12-10 Fixed in 22.11.0 CWE-269

TI-2014-07714 CVE-2014-9490 · GHSA-c9c5-9fpr-m882

The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby…

LOW 27

The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02413 Published 2015-01-20 Fixed in 0.12.2 CWE-399

TI-2025-33092 CVE-2025-53099

Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

LOW 26

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00798 Published 2025-07-01 Fixed in 25.5.0 CWE-288

TI-2024-16346 CVE-2024-24829

SSRF in Sentry via Phabricator integration

LOW 24

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-02-08 Fixed in 24.1.2 CWE-918

TI-2025-40514 CVE-2025-65944 · GHSA-6465-jgvq-jhgp

Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

LOW 23

Sentry-Javascript is an official Sentry SDKs for JavaScript.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00369 Published 2025-11-25 Fixed in 10.27.0 CWE-201

Open these records in search →