SE
Product
sentry
20
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 5Medium 10Low 2
Watch
Add sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39531 | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests Affected: >= 10.0.0, < 23.7.2 |
| CVE-2026-26004 | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries Affected: < 26.1.0 |
| CVE-2024-32474 | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs Affected: >= 24.3.0, < 24.4.1 |
| CVE-2023-36826 | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads Affected: >= 8.21.0, < 23.5.2 |
| CVE-2024-41656 | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) Affected: >= 10.0.0, < 24.7.1 |
| CVE-2023-36829 | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability Affected: >= 23.6.0, < 23.6.2 |
| CVE-2024-53253 | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret Affected: = 24.11.0 |
| CVE-2024-24829 | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration Affected: >= 9.1.0, < 24.1.2 |
| CVE-2024-45605 | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry Affected: >=23.9.0, < 24.9.0 |
| CVE-2024-45606 | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry Affected: >=23.4.0, < 24.9.0 |
Showing 10