GE
Vendor
getsentry
29
CVEs
0
On KEV
2
New 30D
Products
SE9.8
sentry
getsentry
20 CVEs0 on KEV1 new
SE9.1
sentry-javascript
getsentry
4 CVEs0 on KEV1 new
SE6.5
sentry-python
getsentry
2 CVEs0 on KEV0 new
SY4.3
symbolicator
getsentry
2 CVEs0 on KEV0 new
RA–
Raven-ruby
Getsentry
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114139 | SE sentry-javascript getsentry | 9.1 | Oct 21 | Sentry-Javascript: Middleware Bypass when using Tunnel route |
| CVE-2026-102899 | SE sentry getsentry | 7.6 | Oct 14 | Sentry: Improper authentication on SAML SSO process allows user identity linking |
| CVE-2026-83803 | SE sentry getsentry | 7.7 | Sep 22 | Sentry: Unsafe pickle deserialization in Relocation Feature |
| CVE-2026-52794 | SE sentry getsentry | 7.5 | Jun 24 | Sentry: Inefficient Regular Expression Complexity in sentry |
| CVE-2026-42354 | SE sentry getsentry | 9.8 | May 8 | Sentry: Improper authentication on SAML SSO process allows user identity linking |
| CVE-2026-26004 | SE sentry getsentry | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries |
| CVE-2026-27197 | SE sentry getsentry | 9.1 | Feb 21 | Sentry: Improper Authentication on SAML SSO process allows user identity linking |
| CVE-2025-65944 | SE sentry-javascript getsentry | 5.1 | Nov 25 | Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` |
| CVE-2025-53099 | SE sentry getsentry | 7.5 | Jul 1 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation |
| CVE-2025-22146 | SE sentry getsentry | 9.1 | Jan 15 | Improper authentication on SAML SSO process allows user impersonation in sentry |
| CVE-2024-53253 | SE sentry getsentry | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret |
| CVE-2024-45605 | SE sentry getsentry | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry |
| CVE-2024-45606 | SE sentry getsentry | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry |
| CVE-2024-41656 | SE sentry getsentry | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) |
| CVE-2024-40647 | SE sentry-python getsentry | 5.3 | Jul 18 | Unintentional exposure of environment variables to subprocesses in sentry-sdk |
| CVE-2024-35196 | SE sentry getsentry | 2.0 | May 31 | Slack integration leaks sensitive information in logs in Sentry |
| CVE-2024-32474 | SE sentry getsentry | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs |
| CVE-2024-24829 | SE sentry getsentry | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration |
| CVE-2023-51451 | SY symbolicator getsentry | 4.3 | Dec 22 | SSRF in symbolicator via invalid protocol |
| CVE-2023-50249 | SE sentry-javascript getsentry | 7.5 | Dec 20 | Sentry's Astro SDK vulnerable to ReDoS |
| CVE-2023-49094 | SY symbolicator getsentry | 4.3 | Nov 30 | Symbolicator Server Side Request Forgery vulnerability |
| CVE-2023-46729 | SE sentry-javascript getsentry | 6.1 | Nov 10 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint |
| CVE-2023-39531 | SE sentry getsentry | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests |
| CVE-2023-39349 | SE sentry getsentry | 8.1 | Aug 7 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint |
| CVE-2023-36826 | SE sentry getsentry | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads |
| CVE-2023-36829 | SE sentry getsentry | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability |
| CVE-2023-28117 | SE sentry-python getsentry | 6.5 | Mar 22 | Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` |
| CVE-2022-23485 | SE sentry getsentry | 3.7 | Dec 10 | Invite code reuse via cookie manipulation in sentry |
| CVE-2014-9490 | RA Raven-ruby Getsentry | – | Jan 20 | The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a… |
