Sentry vulnerabilities

Products

• Sentry 29
• Software Development Kit 2
• Symbolicator 2

Newest

• getsentry sentry Sentry: Improper authentication on SAML SSO process allows user identity linking CVE-2026-102899 7.6 HighOctober 14, 2026
• getsentry sentry Sentry: Unsafe pickle deserialization in Relocation Feature CVE-2026-83803 7.7 HighSeptember 22, 2026
• ivanti sentry An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a... CVE-2026-83527 8.1 HighSeptember 8, 2026
• getsentry sentry Sentry: Inefficient Regular Expression Complexity in sentry CVE-2026-52794 7.5 HighJune 24, 2026
• ivanti sentry, standalone sentry +1 more An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and... CVE-2026-10523 Public exploit EPSS 53.1% 9.9 CriticalJune 9, 2026
• ivanti sentry, standalone sentry +1 more An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1... CVE-2026-10520 In KEVPublic exploit EPSS 99.9% 10.0 CriticalJune 9, 2026
• sentry Sentry 8.2.0 Remote Code Execution via Pickle Deserialization CVE-2021-47935 Fix available 8.7 HighMay 10, 2026
• getsentry sentry Sentry: Improper authentication on SAML SSO process allows user identity linking CVE-2026-42354 Fix available 9.1 CriticalApril 30, 2026
• getsentry sentry Sentry allows unauthorized access to event data across organizational boundaries CVE-2026-26004 5.7 MediumMarch 17, 2026
• getsentry sentry Sentry: Improper Authentication on SAML SSO process allows user identity linking CVE-2026-27197 Fix available 9.1 CriticalFebruary 21, 2026
• ivanti sentry Enables an authenticated user (enrolled device) to access a service protected by Sentry even if... CVE-2023-39338 6.8 MediumJuly 12, 2025
• getsentry sentry Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation CVE-2025-53099 5.5 MediumJuly 1, 2025
• sentry In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint... CVE-2025-53073 4.2 MediumJune 24, 2025
• getsentry sentry Improper authentication on SAML SSO process allows user impersonation in sentry CVE-2025-22146 Fix available 9.1 CriticalJanuary 15, 2025
• ivanti sentry, standalone sentry +1 more Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local... CVE-2024-8540 8.8 HighDecember 10, 2024
• getsentry sentry Sentry's improper error handling leaks Application Integration Client Secret CVE-2024-53253 Fix available 5.3 MediumNovember 22, 2024
• sentry Telestream Sentry Reports Page page cross site scripting CVE-2024-10276 5.3 MediumOctober 23, 2024
• getsentry sentry Improper authorization on muting of alert rules in sentry CVE-2024-45606 Fix available 7.1 HighSeptember 17, 2024
• getsentry sentry Improper authorization on deletion of user issue alert notifications in sentry CVE-2024-45605 Fix available 6.5 MediumSeptember 17, 2024
• getsentry sentry Sentry vulnerable to stored Cross-Site Scripting (XSS) CVE-2024-41656 Fix available 7.1 HighJuly 23, 2024
• getsentry sentry Slack integration leaks sensitive information in logs in Sentry CVE-2024-35196 Fix available 2.0 LowMay 31, 2024
• getsentry sentry Sentry's superuser cleartext password leaked in logs CVE-2024-32474 Fix available 7.3 HighApril 18, 2024
• ivanti sentry, standalone sentry +1 more A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat... CVE-2023-41724 EPSS 12.8% 9.6 CriticalMarch 31, 2024
• getsentry sentry SSRF in Sentry via Phabricator integration CVE-2024-24829 4.3 MediumFebruary 8, 2024
• getsentry symbolicator SSRF in symbolicator via invalid protocol CVE-2023-51451 4.3 MediumDecember 22, 2023
• getsentry sentry-javascript, sentry astro +1 more Sentry's Astro SDK vulnerable to ReDoS CVE-2023-50249 Fix available 7.5 HighDecember 18, 2023
• getsentry symbolicator Symbolicator Server Side Request Forgery vulnerability CVE-2023-49094 4.3 MediumNovember 30, 2023
• getsentry sentry-javascript, sentry software development kit +1 more Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint CVE-2023-46729 Fix available 9.3 CriticalNovember 9, 2023
• getsentry sentry Sentry vulnerable to incorrect credential validation on OAuth token requests CVE-2023-39531 Fix available 6.5 MediumAugust 9, 2023
• getsentry sentry Sentry vulnerable to privilege escalation via ApiTokensEndpoint CVE-2023-39349 Fix available 8.1 HighAugust 7, 2023
• getsentry sentry Sentry vulnerable to improper authorization on debug and artifact file downloads CVE-2023-36826 Fix available 7.7 HighJuly 25, 2023
• functional sentry Sentry CORS misconfiguration vulnerability CVE-2023-36829 Fix available 6.8 MediumJuly 6, 2023
• getsentry sentry-python, sentry software development kit +1 more Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` CVE-2023-28117 Fix available 7.6 HighMarch 21, 2023
• getsentry sentry Invite code reuse via cookie manipulation in sentry CVE-2022-23485 Fix available 6.4 MediumDecember 10, 2022