Vulnerabilities

TI-2026-78982 CVE-2026-114139 · GHSA-mchm-gjx6-7h55

Sentry-Javascript: Middleware Bypass when using Tunnel route

MEDIUM 48

Sentry-Javascript is an official Sentry SDKs for JavaScript.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.0051 Published 2026-10-21 Fixed in 9.47.2, 10.75.2 +1 CWE-693

TI-2026-74408 CVE-2026-102899

Sentry: Improper authentication on SAML SSO process allows user identity linking

LOW 35

Sentry is an application monitoring and error tracking platform.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00364 Published 2026-10-14 Fixed in 26.7.2 CWE-287

TI-2026-57729 CVE-2026-83803

Sentry: Unsafe pickle deserialization in Relocation Feature

LOW 37

Sentry is an error tracking and performance monitoring tool.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00605 Published 2026-09-22 Fixed in 26.7.0 CWE-502

TI-2026-37904 CVE-2026-52794

Sentry: Inefficient Regular Expression Complexity in sentry

MEDIUM 40

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2026-06-24 Fixed in 26.5.2 CWE-1333

TI-2026-30656 CVE-2026-42354 · GHSA-rcmw-7mc7-3rj7

Sentry: Improper authentication on SAML SSO process allows user identity linking

MEDIUM 50

Sentry is an error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2026-05-08 Fixed in 26.4.1 CWE-290

TI-2026-21018 CVE-2026-26004

Sentry allows unauthorized access to event data across organizational boundaries

MEDIUM 59

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00256 Published 2026-03-17 Fixed in 26.1.0 CWE-639

TI-2026-21634 CVE-2026-27197 · GHSA-ggmg-cqg6-j45g

Sentry: Improper Authentication on SAML SSO process allows user identity linking

MEDIUM 42

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00494 Published 2026-02-21 Fixed in 26.2.0 CWE-287

TI-2025-40514 CVE-2025-65944 · GHSA-6465-jgvq-jhgp

Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

LOW 23

Sentry-Javascript is an official Sentry SDKs for JavaScript.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00369 Published 2025-11-25 Fixed in 10.27.0 CWE-201

TI-2025-33092 CVE-2025-53099

Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

LOW 26

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 4.0MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00798 Published 2025-07-01 Fixed in 25.5.0 CWE-288

TI-2025-16094 CVE-2025-22146 · GHSA-7pq6-v88g-wf3w

Improper authentication on SAML SSO process allows user impersonation in sentry

MEDIUM 48

Sentry is a developer-first error tracking and performance monitoring tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00615 Published 2025-01-15 Fixed in 25.1.0 CWE-287

TI-2024-35717 CVE-2024-53253 · GHSA-v5h2-q2w4-gpcx

Sentry's improper error handling leaks Application Integration Client Secret

LOW 31

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00645 Published 2024-11-22 Fixed in 24.11.1 CWE-209

TI-2024-30624 CVE-2024-45605 · GHSA-54m3-95j9-v89j

Improper authorization on deletion of user issue alert notifications in sentry

LOW 29

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00386 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2024-30625 CVE-2024-45606 · GHSA-v345-w9f2-mpm5

Improper authorization on muting of alert rules in sentry

LOW 31

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2024-09-17 Fixed in 24.9.0 CWE-639

TI-2024-27719 CVE-2024-41656 · GHSA-fm88-hc3v-3www

Sentry vulnerable to stored Cross-Site Scripting (XSS)

LOW 34

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00467 Published 2024-07-23 Fixed in 24.7.1 CWE-79

TI-2024-27058 CVE-2024-40647 · GHSA-g92j-qhmh-64v2

Unintentional exposure of environment variables to subprocesses in sentry-sdk

LOW 23

sentry-sdk is the official Python SDK for Sentry.io.

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.002 Published 2024-07-18 Fixed in 2.8.0, 1.45.1 CWE-200

TI-2024-23268 CVE-2024-35196 · GHSA-c2g2-gx4j-rj3j

Slack integration leaks sensitive information in logs in Sentry

LOW 12

Sentry is a developer-first error tracking and performance monitoring platform.

CVSS 3.1LOW 2.0 Network High privileges User interaction EPSS 0.00575 Published 2024-05-31 Fixed in 24.5.0 CWE-532

TI-2024-21368 CVE-2024-32474 · GHSA-6cjm-4pxw-7xp9

Sentry's superuser cleartext password leaked in logs

LOW 32

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00428 Published 2024-04-18 Fixed in 24.4.1 CWE-117

TI-2024-16346 CVE-2024-24829

SSRF in Sentry via Phabricator integration

LOW 24

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-02-08 Fixed in 24.1.2 CWE-918

TI-2023-28105 CVE-2023-51451

SSRF in symbolicator via invalid protocol

LOW 20

Symbolicator is a service used in Sentry.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2023-12-22 Fixed in 23.12.1 CWE-918

TI-2023-27477 CVE-2023-50249 · GHSA-x3v3-8xg8-8v72

Sentry's Astro SDK vulnerable to ReDoS

LOW 34

Sentry-Javascript is official Sentry SDKs for JavaScript.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-12-20 Fixed in 7.87.0 CWE-400

TI-2023-26759 CVE-2023-49094

Symbolicator Server Side Request Forgery vulnerability

LOW 21

Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00705 Published 2023-11-30 Fixed in 23.11.2 CWE-918

TI-2023-25212 CVE-2023-46729 · GHSA-2rmr-xw8m-22q9

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

MEDIUM 43

sentry-javascript provides Sentry SDKs for JavaScript.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00631 Published 2023-11-10 Fixed in 7.77.0 CWE-918

TI-2023-20663 CVE-2023-39531 · GHSA-hgj4-h2x3-rfx4

Sentry vulnerable to incorrect credential validation on OAuth token requests

LOW 30

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00356 Published 2023-08-09 Fixed in 23.7.2 CWE-287

TI-2023-20488 CVE-2023-39349 · GHSA-9jcq-jf57-c62c

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

LOW 39

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01056 Published 2023-08-07 Fixed in 23.7.2 CWE-284

TI-2023-18620 CVE-2023-36826 · GHSA-m4hc-m2v6-hfw8

Sentry vulnerable to improper authorization on debug and artifact file downloads

LOW 35

Sentry is an error tracking and performance monitoring platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00634 Published 2023-07-25 Fixed in 23.5.2 CWE-285

Vulnerabilities

Filters