Sentry

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Sentry records in CISA KEV

No Sentry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sentry 16 records HIGH Sentry Software Development Kit 2 records MEDIUM Symbolicator 2 records LOW Astro 1 record LOW

Records

22 records

TI-2021-22548 CVE-2021-47935 · GHSA-444r-2whx-3685

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

HIGH 73

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00927 Published 2026-05-10 Fixed in 8.1.4, 8.2.2 CWE-94

TI-2026-21018 CVE-2026-26004

Sentry allows unauthorized access to event data across organizational boundaries

MEDIUM 59

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00256 Published 2026-03-17 Fixed in 26.1.0 CWE-639

TI-2026-30656 CVE-2026-42354 · GHSA-rcmw-7mc7-3rj7

Sentry: Improper authentication on SAML SSO process allows user identity linking

MEDIUM 50

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2026-05-08 Fixed in 26.4.1 CWE-290

TI-2023-25212 CVE-2023-46729 · GHSA-2rmr-xw8m-22q9

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

MEDIUM 43

sentry-javascript provides Sentry SDKs for JavaScript.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00631 Published 2023-11-10 Fixed in 7.77.0 CWE-918

TI-2026-21634 CVE-2026-27197 · GHSA-ggmg-cqg6-j45g

Sentry: Improper Authentication on SAML SSO process allows user identity linking

MEDIUM 42

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-02-21 Fixed in 26.2.0 CWE-287

TI-2026-37904 CVE-2026-52794

Sentry: Inefficient Regular Expression Complexity in sentry

MEDIUM 40

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-06-24 Fixed in 26.5.2 CWE-1333

TI-2023-20488 CVE-2023-39349 · GHSA-9jcq-jf57-c62c

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

LOW 39

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01056 Published 2023-08-07 Fixed in 23.7.2 CWE-284

TI-2023-18620 CVE-2023-36826 · GHSA-m4hc-m2v6-hfw8

Sentry vulnerable to improper authorization on debug and artifact file downloads

LOW 35

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00634 Published 2023-07-25 Fixed in 23.5.2 CWE-285

TI-2024-27719 CVE-2024-41656 · GHSA-fm88-hc3v-3www

Sentry vulnerable to stored Cross-Site Scripting (XSS)

LOW 34

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00467 Published 2024-07-23 Fixed in 24.7.1 CWE-79

TI-2023-27477 CVE-2023-50249 · GHSA-x3v3-8xg8-8v72

Sentry's Astro SDK vulnerable to ReDoS

LOW 34

Sentry-Javascript is official Sentry SDKs for JavaScript.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-12-20 Fixed in 7.87.0 CWE-400

TI-2023-12696 CVE-2023-28117 · GHSA-29pr-6jr8-q5jm

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

LOW 34

Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00647 Published 2023-03-22 Fixed in 1.14.0 CWE-201

TI-2024-21368 CVE-2024-32474 · GHSA-6cjm-4pxw-7xp9

Sentry's superuser cleartext password leaked in logs

LOW 32

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00428 Published 2024-04-18 Fixed in 24.4.1 CWE-117

TI-2024-35717 CVE-2024-53253 · GHSA-v5h2-q2w4-gpcx

Sentry's improper error handling leaks Application Integration Client Secret

LOW 31

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00645 Published 2024-11-22 Fixed in 24.11.1 CWE-209

TI-2024-30625 CVE-2024-45606 · GHSA-v345-w9f2-mpm5

Improper authorization on muting of alert rules in sentry

LOW 31

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2023-20663 CVE-2023-39531 · GHSA-hgj4-h2x3-rfx4

Sentry vulnerable to incorrect credential validation on OAuth token requests

LOW 30

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00356 Published 2023-08-09 Fixed in 23.7.2 CWE-287

TI-2024-30624 CVE-2024-45605 · GHSA-54m3-95j9-v89j

Improper authorization on deletion of user issue alert notifications in sentry

LOW 29

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00386 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2022-07545 CVE-2022-23485 · GHSA-jv85-mqxj-3f9j

Invite code reuse via cookie manipulation in sentry

LOW 29

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00451 Published 2022-12-10 Fixed in 22.11.0 CWE-269

TI-2025-33092 CVE-2025-53099

Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

LOW 26

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00798 Published 2025-07-01 Fixed in 25.5.0 CWE-288

TI-2024-16346 CVE-2024-24829

SSRF in Sentry via Phabricator integration

LOW 24

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-02-08 Fixed in 24.1.2 CWE-918

TI-2023-26759 CVE-2023-49094

Symbolicator Server Side Request Forgery vulnerability

LOW 21

Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00705 Published 2023-11-30 Fixed in 23.11.2 CWE-918

TI-2023-28105 CVE-2023-51451

SSRF in symbolicator via invalid protocol

LOW 20

Symbolicator is a service used in Sentry.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2023-12-22 Fixed in 23.12.1 CWE-918

TI-2025-33072 CVE-2025-53073 · GHSA-gmwj-fvmv-j38g

In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue…

LOW 19

In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member of the project's team.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00236 Published 2025-06-24 No fix listed CWE-425

Open these records in search →