Sentry-javascript (Getsentry) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-21. Vendor: Getsentry.

CVEs of Sentry-javascript

• CVE-2026-114139 - CVSS 9.1 (critical), 2026-10-21: Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs…
• CVE-2025-65944 - CVSS 5.1 (medium), 2025-11-25: Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has…
• CVE-2023-50249 - CVSS 7.5 (high), 2023-12-20: Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro…
• CVE-2023-46729 - CVSS 9.3 (critical), 2023-11-10: sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and…