getsentry sentry-javascript

• CVE-2026-114139 Critical 9.1 Sentry-Javascript: Middleware Bypass when using Tunnel route 0.5%
• CVE-2025-65944 Medium 5.1 Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` 0.4%
• CVE-2023-50249 High 7.5 Sentry's Astro SDK vulnerable to ReDoS 0.8%
• CVE-2023-46729 Critical 9.3 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint 0.6%