Getsentry vulnerabilities
28 CVEs and advisories name Getsentry as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel route
- CVE-2026-102899Sentry: Improper authentication on SAML SSO process allows user identity linking
- CVE-2026-83803Sentry: Unsafe pickle deserialization in Relocation Feature
- CVE-2026-52794Sentry: Inefficient Regular Expression Complexity in sentry
- CVE-2026-42354Sentry: Improper authentication on SAML SSO process allows user identity linking
- CVE-2026-26004Sentry allows unauthorized access to event data across organizational boundaries
- CVE-2026-27197Sentry: Improper Authentication on SAML SSO process allows user identity linking
- CVE-2025-65944Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`
- CVE-2025-53099Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
- CVE-2025-22146Improper authentication on SAML SSO process allows user impersonation in sentry
- CVE-2024-53253Sentry's improper error handling leaks Application Integration Client Secret
- CVE-2024-45605Improper authorization on deletion of user issue alert notifications in sentry
- CVE-2024-45606Improper authorization on muting of alert rules in sentry
- CVE-2024-41656Sentry vulnerable to stored Cross-Site Scripting (XSS)
- CVE-2024-40647Unintentional exposure of environment variables to subprocesses in sentry-sdk
- CVE-2024-35196Slack integration leaks sensitive information in logs in Sentry
- CVE-2024-32474Sentry's superuser cleartext password leaked in logs
- CVE-2024-24829SSRF in Sentry via Phabricator integration
- CVE-2023-51451SSRF in symbolicator via invalid protocol
- CVE-2023-50249Sentry's Astro SDK vulnerable to ReDoS
- CVE-2023-49094Symbolicator Server Side Request Forgery vulnerability
- CVE-2023-46729Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
- CVE-2023-39531Sentry vulnerable to incorrect credential validation on OAuth token requests
- CVE-2023-39349Sentry vulnerable to privilege escalation via ApiTokensEndpoint
- CVE-2023-36826Sentry vulnerable to improper authorization on debug and artifact file downloads
- CVE-2023-36829Sentry CORS misconfiguration vulnerability
- CVE-2023-28117Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
- CVE-2022-23485Invite code reuse via cookie manipulation in sentry