Product by Getsentry

    Sentry-javascript

    4 known vulnerabilities in Sentry-javascript (Getsentry), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sentry-javascript (Getsentry)
    CriticalCVE-2026-114139

    Sentry-Javascript: Middleware Bypass when using Tunnel route

    		—
    CriticalCVE-2023-46729

    Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

    also in 1 other product

    		9.3
    HighCVE-2023-50249

    Sentry's Astro SDK vulnerable to ReDoS

    also in 1 other product

    		7.5
    MediumCVE-2025-65944

    Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

    		—

    All products by Getsentry