SE
Product
sentry
20
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 5Medium 10Low 2
Watch
Add sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42354 | 9.8 | May 8 | Sentry: Improper authentication on SAML SSO process allows user identity linking Affected: >= 21.12.0, < 26.4.1 |
| CVE-2026-27197 | 9.1 | Feb 21 | Sentry: Improper Authentication on SAML SSO process allows user identity linking Affected: >= 21.12.0, < 26.2.0 |
| CVE-2025-22146 | 9.1 | Jan 15 | Improper authentication on SAML SSO process allows user impersonation in sentry Affected: >= 21.12.0, < 25.1.0 |
| CVE-2023-39349 | 8.1 | Aug 7 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint Affected: >= 22.1.0, < 23.7.2 |
| CVE-2026-83803 | 7.7 | Sep 22 | Sentry: Unsafe pickle deserialization in Relocation Feature Affected: >= 23.11.0, < 26.7.0 |
| CVE-2026-102899 | 7.6 | Oct 14 | Sentry: Improper authentication on SAML SSO process allows user identity linking Affected: >= 26.5.0, < 26.7.2 |
| CVE-2026-52794 | 7.5 | Jun 24 | Sentry: Inefficient Regular Expression Complexity in sentry Affected: >= 24.4.0, < 26.5.2 |
| CVE-2025-53099 | 7.5 | Jul 1 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation Affected: < 25.5.0 |
| CVE-2023-39531 | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests Affected: >= 10.0.0, < 23.7.2 |
| CVE-2026-26004 | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries Affected: < 26.1.0 |
| CVE-2024-32474 | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs Affected: >= 24.3.0, < 24.4.1 |
| CVE-2023-36826 | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads Affected: >= 8.21.0, < 23.5.2 |
| CVE-2024-41656 | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) Affected: >= 10.0.0, < 24.7.1 |
| CVE-2023-36829 | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability Affected: >= 23.6.0, < 23.6.2 |
| CVE-2024-53253 | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret Affected: = 24.11.0 |
| CVE-2024-24829 | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration Affected: >= 9.1.0, < 24.1.2 |
| CVE-2024-45605 | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry Affected: >=23.9.0, < 24.9.0 |
| CVE-2024-45606 | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry Affected: >=23.4.0, < 24.9.0 |
| CVE-2022-23485 | 3.7 | Dec 10 | Invite code reuse via cookie manipulation in sentry Affected: >= 20.6.0, < 22.11.0 |
| CVE-2024-35196 | 2.0 | May 31 | Slack integration leaks sensitive information in logs in Sentry Affected: >= 24.3.0, < 24.5.0 |
Showing 20