getsentry

Products

ProductCVEsExploitedLatest
sentry20–Oct 14, 2026
sentry-javascript4–Oct 21, 2026
sentry-python2–Jul 18, 2024
symbolicator2–Dec 22, 2023

Exploited and recent CVEs

  • CVE-2026-114139 Critical 9.1 Sentry-Javascript: Middleware Bypass when using Tunnel route 0.5%
  • CVE-2026-102899 High 7.6 Sentry: Improper authentication on SAML SSO process allows user identity linking 0.4%
  • CVE-2026-83803 High 7.7 Sentry: Unsafe pickle deserialization in Relocation Feature 0.6%
  • CVE-2026-52794 High 7.5 Sentry: Inefficient Regular Expression Complexity in sentry 0.5%
  • CVE-2026-42354 Critical 9.1 Sentry: Improper authentication on SAML SSO process allows user identity linking 0.6%
  • CVE-2026-26004 Medium 5.7 Sentry allows unauthorized access to event data across organizational boundaries 0.3%
  • CVE-2026-27197 Critical 9.1 Sentry: Improper Authentication on SAML SSO process allows user identity linking 0.5%
  • CVE-2025-65944 Medium 5.1 Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` 0.4%
  • CVE-2025-53099 Medium 5.5 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation 0.8%
  • CVE-2025-22146 Critical 9.1 Improper authentication on SAML SSO process allows user impersonation in sentry 0.6%
  • CVE-2024-53253 Medium 5.3 Sentry's improper error handling leaks Application Integration Client Secret 0.6%
  • CVE-2024-45605 Medium 6.5 Improper authorization on deletion of user issue alert notifications in sentry 0.4%
  • CVE-2024-45606 High 7.1 Improper authorization on muting of alert rules in sentry 0.4%
  • CVE-2024-41656 High 7.1 Sentry vulnerable to stored Cross-Site Scripting (XSS) 0.5%
  • CVE-2024-40647 Medium 5.3 Unintentional exposure of environment variables to subprocesses in sentry-sdk 0.2%
  • CVE-2024-35196 Low 2.0 Slack integration leaks sensitive information in logs in Sentry 0.6%
  • CVE-2024-32474 High 7.3 Sentry's superuser cleartext password leaked in logs 0.4%
  • CVE-2024-24829 Medium 4.3 SSRF in Sentry via Phabricator integration 0.5%
  • CVE-2023-51451 Medium 4.3 SSRF in symbolicator via invalid protocol 0.5%
  • CVE-2023-50249 High 7.5 Sentry's Astro SDK vulnerable to ReDoS 0.8%
  • CVE-2023-49094 Medium 4.3 Symbolicator Server Side Request Forgery vulnerability 0.7%
  • CVE-2023-46729 Critical 9.3 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint 0.6%
  • CVE-2023-39531 Medium 6.5 Sentry vulnerable to incorrect credential validation on OAuth token requests 0.4%
  • CVE-2023-39349 High 8.1 Sentry vulnerable to privilege escalation via ApiTokensEndpoint 1.1%
  • CVE-2023-36826 High 7.7 Sentry vulnerable to improper authorization on debug and artifact file downloads 0.6%
  • CVE-2023-36829 Medium 6.8 Sentry CORS misconfiguration vulnerability 0.7%
  • CVE-2023-28117 High 7.6 Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` 0.6%
  • CVE-2022-23485 Medium 6.4 Invite code reuse via cookie manipulation in sentry 0.5%