Getsentry Sentry vulnerabilities

• getsentry sentry-javascript Sentry-Javascript: Middleware Bypass when using Tunnel route CVE-2026-114139 Fix available 9.1 CriticalOctober 21, 2026
• getsentry sentry Sentry: Improper authentication on SAML SSO process allows user identity linking CVE-2026-102899 7.6 HighOctober 14, 2026
• getsentry sentry Sentry: Unsafe pickle deserialization in Relocation Feature CVE-2026-83803 7.7 HighSeptember 22, 2026
• getsentry sentry Sentry: Inefficient Regular Expression Complexity in sentry CVE-2026-52794 7.5 HighJune 24, 2026
• getsentry sentry Sentry: Improper authentication on SAML SSO process allows user identity linking CVE-2026-42354 Fix available 9.1 CriticalApril 30, 2026
• getsentry sentry Sentry allows unauthorized access to event data across organizational boundaries CVE-2026-26004 5.7 MediumMarch 17, 2026
• getsentry sentry Sentry: Improper Authentication on SAML SSO process allows user identity linking CVE-2026-27197 Fix available 9.1 CriticalFebruary 21, 2026
• getsentry sentry-javascript Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` CVE-2025-65944 Fix available 5.1 MediumNovember 24, 2025
• getsentry sentry Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation CVE-2025-53099 5.5 MediumJuly 1, 2025
• getsentry sentry Improper authentication on SAML SSO process allows user impersonation in sentry CVE-2025-22146 Fix available 9.1 CriticalJanuary 15, 2025
• getsentry sentry Sentry's improper error handling leaks Application Integration Client Secret CVE-2024-53253 Fix available 5.3 MediumNovember 22, 2024
• getsentry sentry Improper authorization on muting of alert rules in sentry CVE-2024-45606 Fix available 7.1 HighSeptember 17, 2024
• getsentry sentry Improper authorization on deletion of user issue alert notifications in sentry CVE-2024-45605 Fix available 6.5 MediumSeptember 17, 2024
• getsentry sentry Sentry vulnerable to stored Cross-Site Scripting (XSS) CVE-2024-41656 Fix available 7.1 HighJuly 23, 2024
• getsentry sentry-python Unintentional exposure of environment variables to subprocesses in sentry-sdk CVE-2024-40647 Fix available 5.3 MediumJuly 18, 2024
• getsentry sentry Slack integration leaks sensitive information in logs in Sentry CVE-2024-35196 Fix available 2.0 LowMay 31, 2024
• getsentry sentry Sentry's superuser cleartext password leaked in logs CVE-2024-32474 Fix available 7.3 HighApril 18, 2024
• getsentry sentry SSRF in Sentry via Phabricator integration CVE-2024-24829 4.3 MediumFebruary 8, 2024
• getsentry sentry-javascript, sentry astro +1 more Sentry's Astro SDK vulnerable to ReDoS CVE-2023-50249 Fix available 7.5 HighDecember 18, 2023
• getsentry sentry-javascript, sentry software development kit +1 more Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint CVE-2023-46729 Fix available 9.3 CriticalNovember 9, 2023
• getsentry sentry Sentry vulnerable to incorrect credential validation on OAuth token requests CVE-2023-39531 Fix available 6.5 MediumAugust 9, 2023
• getsentry sentry Sentry vulnerable to privilege escalation via ApiTokensEndpoint CVE-2023-39349 Fix available 8.1 HighAugust 7, 2023
• getsentry sentry Sentry vulnerable to improper authorization on debug and artifact file downloads CVE-2023-36826 Fix available 7.7 HighJuly 25, 2023
• functional sentry Sentry CORS misconfiguration vulnerability CVE-2023-36829 Fix available 6.8 MediumJuly 6, 2023
• getsentry sentry-python, sentry software development kit +1 more Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` CVE-2023-28117 Fix available 7.6 HighMarch 21, 2023
• getsentry sentry Invite code reuse via cookie manipulation in sentry CVE-2022-23485 Fix available 6.4 MediumDecember 10, 2022