Skip to content
Getsentry vulnerabilities
Newest
-
getsentry sentry-javascript
Sentry-Javascript: Middleware Bypass when using Tunnel route
CVE-2026-114139
Fix available
9.1 Critical
-
getsentry sentry
Sentry: Improper authentication on SAML SSO process allows user identity linking
CVE-2026-102899
7.6 High
-
getsentry sentry
Sentry: Unsafe pickle deserialization in Relocation Feature
CVE-2026-83803
7.7 High
-
getsentry sentry
Sentry: Inefficient Regular Expression Complexity in sentry
CVE-2026-52794
7.5 High
-
getsentry sentry
Sentry: Improper authentication on SAML SSO process allows user identity linking
CVE-2026-42354
Fix available
9.1 Critical
-
getsentry sentry
Sentry allows unauthorized access to event data across organizational boundaries
CVE-2026-26004
5.7 Medium
-
getsentry sentry
Sentry: Improper Authentication on SAML SSO process allows user identity linking
CVE-2026-27197
Fix available
9.1 Critical
-
getsentry sentry-javascript
Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`
CVE-2025-65944
Fix available
5.1 Medium
-
getsentry sentry
Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
CVE-2025-53099
5.5 Medium
-
getsentry sentry
Improper authentication on SAML SSO process allows user impersonation in sentry
CVE-2025-22146
Fix available
9.1 Critical
-
getsentry sentry
Sentry's improper error handling leaks Application Integration Client Secret
CVE-2024-53253
Fix available
5.3 Medium
-
getsentry sentry
Improper authorization on muting of alert rules in sentry
CVE-2024-45606
Fix available
7.1 High
-
getsentry sentry
Improper authorization on deletion of user issue alert notifications in sentry
CVE-2024-45605
Fix available
6.5 Medium
-
getsentry sentry
Sentry vulnerable to stored Cross-Site Scripting (XSS)
CVE-2024-41656
Fix available
7.1 High
-
getsentry sentry-python
Unintentional exposure of environment variables to subprocesses in sentry-sdk
CVE-2024-40647
Fix available
5.3 Medium
-
getsentry sentry
Slack integration leaks sensitive information in logs in Sentry
CVE-2024-35196
Fix available
2.0 Low
-
getsentry sentry
Sentry's superuser cleartext password leaked in logs
CVE-2024-32474
Fix available
7.3 High
-
getsentry sentry
SSRF in Sentry via Phabricator integration
CVE-2024-24829
4.3 Medium
-
getsentry symbolicator
SSRF in symbolicator via invalid protocol
CVE-2023-51451
4.3 Medium
-
getsentry sentry-javascript, sentry astro +1 more
Sentry's Astro SDK vulnerable to ReDoS
CVE-2023-50249
Fix available
7.5 High
-
getsentry symbolicator
Symbolicator Server Side Request Forgery vulnerability
CVE-2023-49094
4.3 Medium
-
getsentry sentry-javascript, sentry software development kit +1 more
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
CVE-2023-46729
Fix available
9.3 Critical
-
getsentry sentry
Sentry vulnerable to incorrect credential validation on OAuth token requests
CVE-2023-39531
Fix available
6.5 Medium
-
getsentry sentry
Sentry vulnerable to privilege escalation via ApiTokensEndpoint
CVE-2023-39349
Fix available
8.1 High
-
getsentry sentry
Sentry vulnerable to improper authorization on debug and artifact file downloads
CVE-2023-36826
Fix available
7.7 High
-
functional sentry
Sentry CORS misconfiguration vulnerability
CVE-2023-36829
Fix available
6.8 Medium
-
getsentry sentry-python, sentry software development kit +1 more
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
CVE-2023-28117
Fix available
7.6 High
-
getsentry sentry
Invite code reuse via cookie manipulation in sentry
CVE-2022-23485
Fix available
6.4 Medium
-
getsentry raven-ruby
sentry-raven allows remote attackers to cause a denial of service via a large exponent value in a scientific number
CVE-2014-9490
Fix available
5.0 Medium