Product by Getsentry
Sentry
20 known vulnerabilities in Sentry (Getsentry), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-83803 | Sentry: Unsafe pickle deserialization in Relocation Feature | — | |
| Critical | CVE-2026-42354 | Sentry: Improper authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2023-39349 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint | 8.1 | |
| High | CVE-2026-102899 | Sentry: Improper authentication on SAML SSO process allows user identity linking | — | |
| Critical | CVE-2026-27197 | Sentry: Improper Authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2026-52794 | Sentry: Inefficient Regular Expression Complexity in sentry | 7.5 | |
| High | CVE-2025-53099 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation | 7.5 | |
| Critical | CVE-2025-22146 | Improper authentication on SAML SSO process allows user impersonation in sentry | 9.1 | |
| High | CVE-2023-36826 | Sentry vulnerable to improper authorization on debug and artifact file downloads | 7.7 | |
| Medium | CVE-2023-36829 | Sentry CORS misconfiguration vulnerability | 6.8 | |
| High | CVE-2024-41656 | Sentry vulnerable to stored Cross-Site Scripting (XSS) | 7.1 | |
| Medium | CVE-2024-53253 | Sentry's improper error handling leaks Application Integration Client Secret | 5.3 | |
| High | CVE-2024-32474 | Sentry's superuser cleartext password leaked in logs | 7.3 | |
| Medium | CVE-2026-26004 | Sentry allows unauthorized access to event data across organizational boundaries | 6.5 | |
| High | CVE-2024-45606 | Improper authorization on muting of alert rules in sentry | 7.1 | |
| Medium | CVE-2024-45605 | Improper authorization on deletion of user issue alert notifications in sentry | 6.5 | |
| Medium | CVE-2022-23485 | Invite code reuse via cookie manipulation in sentry | 6.4 | |
| Medium | CVE-2023-39531 | Sentry vulnerable to incorrect credential validation on OAuth token requests | 6.5 | |
| Medium | CVE-2024-24829 | SSRF in Sentry via Phabricator integration | 4.3 | |
| Low | CVE-2024-35196 | Slack integration leaks sensitive information in logs in Sentry | 2.0 |