SE
Product
Sentry
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 11Low 1
Watch
Add Sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42354 | 9.8 | May 8 | Sentry: Improper authentication on SAML SSO process allows user identity linking Affected: 21.12.0 before 26.4.1 |
| CVE-2026-27197 | 9.1 | Feb 21 | Sentry: Improper Authentication on SAML SSO process allows user identity linking Affected: 21.12.0 before 26.2.0 |
| CVE-2021-47935 | 8.8 | May 10 | Sentry 8.2.0 Remote Code Execution via Pickle Deserialization Affected: 8.2.0 |
| CVE-2023-39349 | 8.1 | Aug 7 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint Affected: 22.1.0 before 23.7.2 |
| CVE-2026-52794 | 7.5 | Jun 24 | Sentry: Inefficient Regular Expression Complexity in sentry Affected: 24.4.0 before 26.5.2 |
| CVE-2025-53099 | 7.5 | Jul 1 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation Affected: before 25.5.0 |
| CVE-2023-39531 | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests Affected: 10.0.0 before 23.7.2 |
| CVE-2026-26004 | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries Affected: before 26.1.0 |
| CVE-2024-32474 | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs Affected: 24.3.0 before 24.4.1 |
| CVE-2023-36826 | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads Affected: 8.21.0 before 23.5.2 |
| CVE-2024-41656 | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) Affected: 10.0.0 before 24.7.1 |
| CVE-2023-36829 | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability Affected: 23.6.0 before 23.6.2 |
| CVE-2024-53253 | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret Affected: 24.11.0 |
| CVE-2024-24829 | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration Affected: 9.1.0 before 24.1.2 |
| CVE-2024-45605 | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry Affected: 23.9.0 before 24.9.0 |
| CVE-2024-45606 | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry Affected: 23.4.0 before 24.9.0 |
| CVE-2025-53073 | 4.2 | Jun 24 | In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member… Affected: 25.1.0 through 25.5.1 |
| CVE-2022-23485 | 3.7 | Dec 10 | Invite code reuse via cookie manipulation in sentry Affected: 20.6.0 through 22.10.0 |
Showing 18