Vulnerabilities

TI-2026-37904 CVE-2026-52794

Sentry: Inefficient Regular Expression Complexity in sentry

MEDIUM 40

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-06-24 Fixed in 26.5.2 CWE-1333

TI-2021-22548 CVE-2021-47935 · GHSA-444r-2whx-3685

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

HIGH 73

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00927 Published 2026-05-10 Fixed in 8.1.4, 8.2.2 CWE-94

TI-2026-30656 CVE-2026-42354 · GHSA-rcmw-7mc7-3rj7

Sentry: Improper authentication on SAML SSO process allows user identity linking

MEDIUM 50

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2026-05-08 Fixed in 26.4.1 CWE-290

TI-2026-21018 CVE-2026-26004

Sentry allows unauthorized access to event data across organizational boundaries

MEDIUM 59

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00256 Published 2026-03-17 Fixed in 26.1.0 CWE-639

TI-2026-21634 CVE-2026-27197 · GHSA-ggmg-cqg6-j45g

Sentry: Improper Authentication on SAML SSO process allows user identity linking

MEDIUM 42

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-02-21 Fixed in 26.2.0 CWE-287

TI-2025-33092 CVE-2025-53099

Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

LOW 26

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00798 Published 2025-07-01 Fixed in 25.5.0 CWE-288

TI-2024-35717 CVE-2024-53253 · GHSA-v5h2-q2w4-gpcx

Sentry's improper error handling leaks Application Integration Client Secret

LOW 31

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00645 Published 2024-11-22 Fixed in 24.11.1 CWE-209

TI-2024-30624 CVE-2024-45605 · GHSA-54m3-95j9-v89j

Improper authorization on deletion of user issue alert notifications in sentry

LOW 29

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00386 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2024-30625 CVE-2024-45606 · GHSA-v345-w9f2-mpm5

Improper authorization on muting of alert rules in sentry

LOW 31

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2024-27719 CVE-2024-41656 · GHSA-fm88-hc3v-3www

Sentry vulnerable to stored Cross-Site Scripting (XSS)

LOW 34

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00467 Published 2024-07-23 Fixed in 24.7.1 CWE-79

TI-2024-21368 CVE-2024-32474 · GHSA-6cjm-4pxw-7xp9

Sentry's superuser cleartext password leaked in logs

LOW 32

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00428 Published 2024-04-18 Fixed in 24.4.1 CWE-117

TI-2024-16346 CVE-2024-24829

SSRF in Sentry via Phabricator integration

LOW 24

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-02-08 Fixed in 24.1.2 CWE-918

TI-2023-20663 CVE-2023-39531 · GHSA-hgj4-h2x3-rfx4

Sentry vulnerable to incorrect credential validation on OAuth token requests

LOW 30

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00356 Published 2023-08-09 Fixed in 23.7.2 CWE-287

TI-2023-20488 CVE-2023-39349 · GHSA-9jcq-jf57-c62c

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

LOW 39

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01056 Published 2023-08-07 Fixed in 23.7.2 CWE-284

TI-2023-18620 CVE-2023-36826 · GHSA-m4hc-m2v6-hfw8

Sentry vulnerable to improper authorization on debug and artifact file downloads

LOW 35

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00634 Published 2023-07-25 Fixed in 23.5.2 CWE-285

TI-2022-07545 CVE-2022-23485 · GHSA-jv85-mqxj-3f9j

Invite code reuse via cookie manipulation in sentry

LOW 29

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00451 Published 2022-12-10 Fixed in 22.11.0 CWE-269

Vulnerabilities

Filters