Getsentry - vulnerabilities (CVEs)

29 CVEs in 5 products, 2 in the last 30 days, newest from 2026-10-21.

Products

Sentry - 20 CVEs
Sentry-javascript - 4 CVEs
Sentry-python - 2 CVEs
Symbolicator - 2 CVEs
Raven-ruby - 1 CVEs

Newest CVEs of Getsentry

CVE-2026-114139 - CVSS 9.1 (critical), 2026-10-21: Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs…
CVE-2026-102899 - CVSS 7.6 (high), 2026-10-14: Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls…
CVE-2026-83803 - CVSS 7.7 (high), 2026-09-22: Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely…
CVE-2026-52794 - CVSS 7.5 (high), 2026-06-24: Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in…
CVE-2026-42354 - CVSS 9.8 (critical), 2026-05-08: Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the…
CVE-2026-26004 - CVSS 6.5 (medium), 2026-03-18: Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object…
CVE-2026-27197 - CVSS 9.1 (critical), 2026-02-21: Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO…
CVE-2025-65944 - CVSS 5.1 (medium), 2025-11-25: Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has…
CVE-2025-53099 - CVSS 7.5 (high), 2025-07-01: Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered…
CVE-2025-22146 - CVSS 9.1 (critical), 2025-01-15: Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry.…
CVE-2024-53253 - CVSS 5.3 (medium), 2024-11-22: Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error…
CVE-2024-45606 - CVSS 7.1 (high), 2024-09-17: Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and…
CVE-2024-45605 - CVSS 6.5 (medium), 2024-09-17: Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary…
CVE-2024-41656 - CVSS 7.1 (high), 2024-07-23: Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1, an unsanitized payload sent by an…
CVE-2024-40647 - CVSS 5.3 (medium), 2024-07-18: sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses…
CVE-2024-35196 - CVSS 2 (low), 2024-05-31: Sentry is a developer-first error tracking and performance monitoring platform. Sentry's Slack integration incorrectly records the incoming request body in…
CVE-2024-32474 - CVSS 7.3 (high), 2024-04-18: Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password,…
CVE-2024-24829 - CVSS 5.3 (medium), 2024-02-09: Sentry is an error tracking and performance monitoring platform. Sentry’s integration platform provides a way for external services to interact with Sentry.…
CVE-2023-51451 - CVSS 4.3 (medium), 2023-12-22: Symbolicator is a service used in Sentry. Starting in Symbolicator version 0.3.3 and prior to version 21.12.1, an attacker could make Symbolicator send GET…
CVE-2023-50249 - CVSS 7.5 (high), 2023-12-20: Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro…
CVE-2023-49094 - CVSS 4.3 (medium), 2023-11-30: Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support. An attacker could make Symbolicator send arbitrary…
CVE-2023-46729 - CVSS 9.3 (critical), 2023-11-10: sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and…
CVE-2023-39531 - CVSS 6.8 (medium), 2023-08-09: Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 23.7.2, an attacker with sufficient…
CVE-2023-39349 - CVSS 8.1 (high), 2023-08-07: Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token…
CVE-2023-36826 - CVSS 7.7 (high), 2023-07-25: Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a…
CVE-2023-36829 - CVSS 6.8 (medium), 2023-07-06: Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns…
CVE-2023-28117 - CVSS 7.6 (high), 2023-03-22: Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration of versions prior to 1.14.0 of the…
CVE-2022-23485 - CVSS 6.4 (medium), 2022-12-10: Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid…
CVE-2014-9490 - CVSS 5 (medium), 2015-01-20: The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large…