Vendor
Getsentry
29 known vulnerabilities in products by Getsentry, 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-114139 | Sentry-Javascript: Middleware Bypass when using Tunnel route | — | |
| High | CVE-2026-83803 | Sentry: Unsafe pickle deserialization in Relocation Feature | — | |
| Critical | CVE-2026-42354 | Sentry: Improper authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2023-39349 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint | 8.1 | |
| Critical | CVE-2023-46729 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | 9.3 | |
| High | CVE-2026-102899 | Sentry: Improper authentication on SAML SSO process allows user identity linking | — | |
| Critical | CVE-2026-27197 | Sentry: Improper Authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2026-52794 | Sentry: Inefficient Regular Expression Complexity in sentry | 7.5 | |
| High | CVE-2025-53099 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation | 7.5 | |
| Critical | CVE-2025-22146 | Improper authentication on SAML SSO process allows user impersonation in sentry | 9.1 | |
| High | CVE-2023-50249 | Sentry's Astro SDK vulnerable to ReDoS | 7.5 | |
| High | CVE-2023-36826 | Sentry vulnerable to improper authorization on debug and artifact file downloads | 7.7 | |
| High | CVE-2023-28117 | Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` | 7.6 | |
| Medium | CVE-2023-36829 | Sentry CORS misconfiguration vulnerability | 6.8 | |
| Not rated | CVE-2014-9490 | GetSentry Raven-Ruby for Ruby: Denial of Service | — | |
| High | CVE-2024-41656 | Sentry vulnerable to stored Cross-Site Scripting (XSS) | 7.1 | |
| Medium | CVE-2024-53253 | Sentry's improper error handling leaks Application Integration Client Secret | 5.3 | |
| High | CVE-2024-32474 | Sentry's superuser cleartext password leaked in logs | 7.3 | |
| Medium | CVE-2026-26004 | Sentry allows unauthorized access to event data across organizational boundaries | 6.5 | |
| High | CVE-2024-45606 | Improper authorization on muting of alert rules in sentry | 7.1 | |
| Medium | CVE-2023-49094 | Symbolicator Server Side Request Forgery vulnerability | 4.3 | |
| Medium | CVE-2024-45605 | Improper authorization on deletion of user issue alert notifications in sentry | 6.5 | |
| Medium | CVE-2022-23485 | Invite code reuse via cookie manipulation in sentry | 6.4 | |
| Medium | CVE-2025-65944 | Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` | — | |
| Medium | CVE-2023-39531 | Sentry vulnerable to incorrect credential validation on OAuth token requests | 6.5 |
Products
| Sentry | 20 | 0 |
| Sentry-javascript | 4 | 0 |