{"items":[{"id":"CVE-2026-114139","published":"2026-10-21T20:14:34.419Z","updated":"2026-10-28T01:38:14.177Z","title":"Sentry-Javascript: Middleware Bypass when using Tunnel route","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2026-102899","published":"2026-10-14T18:57:50.768Z","updated":"2026-10-15T14:23:19.741Z","title":"Sentry: Improper authentication on SAML SSO process allows user identity linking","severity":"HIGH","score":7.6,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-83803","published":"2026-09-22T16:24:13.720Z","updated":"2026-09-22T17:43:35.934Z","title":"Sentry: Unsafe pickle deserialization in Relocation Feature","severity":"HIGH","score":7.7,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00605,"kevAdded":null},{"id":"CVE-2026-52794","published":"2026-06-24T21:26:26.512Z","updated":"2026-06-25T13:52:33.945Z","title":"Sentry: Inefficient Regular Expression Complexity in sentry","severity":"HIGH","score":7.5,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2026-42354","published":"2026-05-08T22:58:33.659Z","updated":"2026-05-11T14:37:55.823Z","title":"Sentry: Improper authentication on SAML SSO process allows user identity linking","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2026-26004","published":"2026-03-17T23:21:35.460Z","updated":"2026-03-18T20:17:22.669Z","title":"Sentry allows unauthorized access to event data across organizational boundaries","severity":"MEDIUM","score":5.7,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-27197","published":"2026-02-21T04:35:14.635Z","updated":"2026-02-24T19:00:07.663Z","title":"Sentry: Improper Authentication on SAML SSO process allows user identity linking","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2025-65944","published":"2025-11-25T00:23:53.215Z","updated":"2025-11-25T14:33:37.980Z","title":"Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`","severity":"MEDIUM","score":5.1,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2025-53099","published":"2025-07-01T14:53:16.878Z","updated":"2025-07-01T15:06:29.774Z","title":"Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation","severity":"MEDIUM","score":5.5,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00798,"kevAdded":null},{"id":"CVE-2025-22146","published":"2025-01-15T19:57:59.734Z","updated":"2025-01-15T20:44:47.931Z","title":"Improper authentication on SAML SSO process allows user impersonation in sentry","severity":"CRITICAL","score":9.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00615,"kevAdded":null},{"id":"CVE-2024-53253","published":"2024-11-22T19:58:55.886Z","updated":"2024-11-25T21:48:26.206Z","title":"Sentry's improper error handling leaks Application Integration Client Secret","severity":"MEDIUM","score":5.3,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2024-45605","published":"2024-09-17T19:44:50.664Z","updated":"2024-09-18T13:19:27.312Z","title":"Improper authorization on deletion of user issue alert notifications in sentry","severity":"MEDIUM","score":6.5,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2024-45606","published":"2024-09-17T19:43:18.650Z","updated":"2024-09-18T13:20:30.270Z","title":"Improper authorization on muting of alert rules in sentry","severity":"HIGH","score":7.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2024-41656","published":"2024-07-23T21:30:25.526Z","updated":"2024-08-13T20:29:11.466Z","title":"Sentry vulnerable to stored Cross-Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2024-40647","published":"2024-07-18T16:51:23.539Z","updated":"2026-06-01T05:37:14.536Z","title":"Unintentional exposure of environment variables to subprocesses in sentry-sdk","severity":"MEDIUM","score":5.3,"vendor":"getsentry","product":"sentry-python","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2024-35196","published":"2024-05-31T17:25:55.716Z","updated":"2024-08-02T03:07:46.866Z","title":"Slack integration leaks sensitive information in logs in Sentry","severity":"LOW","score":2,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2024-32474","published":"2024-04-18T19:50:44.541Z","updated":"2024-08-02T02:13:39.118Z","title":"Sentry's superuser cleartext password leaked in logs","severity":"HIGH","score":7.3,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2024-24829","published":"2024-02-08T23:44:07.676Z","updated":"2024-08-01T23:28:12.936Z","title":"SSRF in Sentry via Phabricator integration","severity":"MEDIUM","score":4.3,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2023-51451","published":"2023-12-22T21:01:21.824Z","updated":"2024-08-02T22:32:10.044Z","title":"SSRF in symbolicator via invalid protocol","severity":"MEDIUM","score":4.3,"vendor":"getsentry","product":"symbolicator","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2023-50249","published":"2023-12-20T13:53:00.512Z","updated":"2024-08-02T22:09:49.793Z","title":"Sentry's Astro SDK vulnerable to ReDoS","severity":"HIGH","score":7.5,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.00785,"kevAdded":null},{"id":"CVE-2023-49094","published":"2023-11-30T04:49:37.404Z","updated":"2025-06-05T13:31:36.875Z","title":"Symbolicator Server Side Request Forgery vulnerability","severity":"MEDIUM","score":4.3,"vendor":"getsentry","product":"symbolicator","kev":false,"epss":0.00705,"kevAdded":null},{"id":"CVE-2023-46729","published":"2023-11-10T00:57:15.611Z","updated":"2024-09-03T17:44:32.064Z","title":"Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint","severity":"CRITICAL","score":9.3,"vendor":"getsentry","product":"sentry-javascript","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2023-39531","published":"2023-08-09T16:09:34.265Z","updated":"2024-10-03T15:12:18.720Z","title":"Sentry vulnerable to incorrect credential validation on OAuth token requests","severity":"MEDIUM","score":6.5,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2023-39349","published":"2023-08-07T18:27:12.396Z","updated":"2024-10-04T19:12:12.595Z","title":"Sentry vulnerable to privilege escalation via ApiTokensEndpoint","severity":"HIGH","score":8.1,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.01056,"kevAdded":null},{"id":"CVE-2023-36826","published":"2023-07-25T18:50:42.350Z","updated":"2024-10-03T19:25:30.691Z","title":"Sentry vulnerable to improper authorization on debug and artifact file downloads","severity":"HIGH","score":7.7,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00634,"kevAdded":null},{"id":"CVE-2023-36829","published":"2023-07-06T22:08:58.922Z","updated":"2024-11-06T16:44:37.019Z","title":"Sentry CORS misconfiguration vulnerability","severity":"MEDIUM","score":6.8,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00666,"kevAdded":null},{"id":"CVE-2023-28117","published":"2023-03-22T19:37:18.748Z","updated":"2025-02-25T14:51:37.740Z","title":"Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`","severity":"HIGH","score":7.6,"vendor":"getsentry","product":"sentry-python","kev":false,"epss":0.00647,"kevAdded":null},{"id":"CVE-2022-23485","published":"2022-12-10T00:40:46.301Z","updated":"2025-04-23T16:29:00.368Z","title":"Invite code reuse via cookie manipulation in sentry","severity":"MEDIUM","score":6.4,"vendor":"getsentry","product":"sentry","kev":false,"epss":0.00451,"kevAdded":null}]}