SE
Product
sentry-javascript
4
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add sentry-javascript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114139 | 9.1 | Oct 21 | Sentry-Javascript: Middleware Bypass when using Tunnel route Affected: >= 9.36.0, < 9.47.2; >= 10.0.0-alpha.0, < 10.75.2; >= 11.0.0-alpha.0, < 11.0.0-rc.1 |
| CVE-2023-50249 | 7.5 | Dec 20 | Sentry's Astro SDK vulnerable to ReDoS Affected: >= 7.78.0, < 7.87.0 |
| CVE-2023-46729 | 6.1 | Nov 10 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint Affected: >= 7.26.0, < 7.77.0 |
| CVE-2025-65944 | 5.1 | Nov 25 | Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` Affected: >= 10.11.0, < 10.27.0 |
Showing 4