# cve.now: Getsentry

The newest entries naming Getsentry as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-114139](https://cve.now/CVE-2026-114139.md): Sentry-Javascript: Middleware Bypass when using Tunnel route (CVSS 9.1)
- [CVE-2026-102899](https://cve.now/CVE-2026-102899.md): Sentry: Improper authentication on SAML SSO process allows user identity linking (CVSS 7.6)
- [CVE-2026-83803](https://cve.now/CVE-2026-83803.md): Sentry: Unsafe pickle deserialization in Relocation Feature (CVSS 7.7)
- [CVE-2026-52794](https://cve.now/CVE-2026-52794.md): Sentry: Inefficient Regular Expression Complexity in sentry (CVSS 7.5)
- [CVE-2026-42354](https://cve.now/CVE-2026-42354.md): Sentry: Improper authentication on SAML SSO process allows user identity linking (CVSS 9.1)
- [CVE-2026-26004](https://cve.now/CVE-2026-26004.md): Sentry allows unauthorized access to event data across organizational boundaries (CVSS 5.7)
- [CVE-2026-27197](https://cve.now/CVE-2026-27197.md): Sentry: Improper Authentication on SAML SSO process allows user identity linking (CVSS 9.1)
- [CVE-2025-65944](https://cve.now/CVE-2025-65944.md): Sentry-Javascript deals with leaked sensitive headers when \`sendDefaultPii\` is set to \`true\` (CVSS 5.1)
- [CVE-2025-53099](https://cve.now/CVE-2025-53099.md): Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation (CVSS 5.5)
- [CVE-2025-22146](https://cve.now/CVE-2025-22146.md): Improper authentication on SAML SSO process allows user impersonation in sentry (CVSS 9.1)
- [CVE-2024-53253](https://cve.now/CVE-2024-53253.md): Sentry's improper error handling leaks Application Integration Client Secret (CVSS 5.3)
- [CVE-2024-45605](https://cve.now/CVE-2024-45605.md): Improper authorization on deletion of user issue alert notifications in sentry (CVSS 6.5)
- [CVE-2024-45606](https://cve.now/CVE-2024-45606.md): Improper authorization on muting of alert rules in sentry (CVSS 7.1)
- [CVE-2024-41656](https://cve.now/CVE-2024-41656.md): Sentry vulnerable to stored Cross-Site Scripting (XSS) (CVSS 7.1)
- [CVE-2024-40647](https://cve.now/CVE-2024-40647.md): Unintentional exposure of environment variables to subprocesses in sentry-sdk (CVSS 5.3)
- [CVE-2024-35196](https://cve.now/CVE-2024-35196.md): Slack integration leaks sensitive information in logs in Sentry (CVSS 2.0)
- [CVE-2024-32474](https://cve.now/CVE-2024-32474.md): Sentry's superuser cleartext password leaked in logs (CVSS 7.3)
- [CVE-2024-24829](https://cve.now/CVE-2024-24829.md): SSRF in Sentry via Phabricator integration (CVSS 4.3)
- [CVE-2023-51451](https://cve.now/CVE-2023-51451.md): SSRF in symbolicator via invalid protocol (CVSS 4.3)
- [CVE-2023-50249](https://cve.now/CVE-2023-50249.md): Sentry's Astro SDK vulnerable to ReDoS (CVSS 7.5)
- [CVE-2023-49094](https://cve.now/CVE-2023-49094.md): Symbolicator Server Side Request Forgery vulnerability (CVSS 4.3)
- [CVE-2023-46729](https://cve.now/CVE-2023-46729.md): Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint (CVSS 9.3)
- [CVE-2023-39531](https://cve.now/CVE-2023-39531.md): Sentry vulnerable to incorrect credential validation on OAuth token requests (CVSS 6.5)
- [CVE-2023-39349](https://cve.now/CVE-2023-39349.md): Sentry vulnerable to privilege escalation via ApiTokensEndpoint (CVSS 8.1)
- [CVE-2023-36826](https://cve.now/CVE-2023-36826.md): Sentry vulnerable to improper authorization on debug and artifact file downloads (CVSS 7.7)
- [CVE-2023-36829](https://cve.now/CVE-2023-36829.md): Sentry CORS misconfiguration vulnerability (CVSS 6.8)
- [CVE-2023-28117](https://cve.now/CVE-2023-28117.md): Sentry SDK leaks sensitive session information when \`sendDefaultPII\` is set to \`True\` (CVSS 7.6)
- [CVE-2022-23485](https://cve.now/CVE-2022-23485.md): Invite code reuse via cookie manipulation in sentry (CVSS 6.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/getsentry
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.