Vendor
Sentry
22 known vulnerabilities in products by Sentry, 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-47935 | Sentry 8.2.0 Remote Code Execution via Pickle Deserialization | 8.8 | |
| Critical | CVE-2026-42354 | Sentry: Improper authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2023-39349 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint | 8.1 | |
| Critical | CVE-2023-46729 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | 9.3 | |
| Critical | CVE-2026-27197 | Sentry: Improper Authentication on SAML SSO process allows user identity linking | 9.1 | |
| High | CVE-2026-52794 | Sentry: Inefficient Regular Expression Complexity in sentry | 7.5 | |
| High | CVE-2025-53099 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation | 7.5 | |
| High | CVE-2023-50249 | Sentry's Astro SDK vulnerable to ReDoS | 7.5 | |
| High | CVE-2023-36826 | Sentry vulnerable to improper authorization on debug and artifact file downloads | 7.7 | |
| High | CVE-2023-28117 | Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` | 7.6 | |
| High | CVE-2024-41656 | Sentry vulnerable to stored Cross-Site Scripting (XSS) | 7.1 | |
| Medium | CVE-2024-53253 | Sentry's improper error handling leaks Application Integration Client Secret | 5.3 | |
| High | CVE-2024-32474 | Sentry's superuser cleartext password leaked in logs | 7.3 | |
| Medium | CVE-2026-26004 | Sentry allows unauthorized access to event data across organizational boundaries | 6.5 | |
| High | CVE-2024-45606 | Improper authorization on muting of alert rules in sentry | 7.1 | |
| Medium | CVE-2023-49094 | Symbolicator Server Side Request Forgery vulnerability | 4.3 | |
| Medium | CVE-2024-45605 | Improper authorization on deletion of user issue alert notifications in sentry | 6.5 | |
| Medium | CVE-2022-23485 | Invite code reuse via cookie manipulation in sentry | 6.4 | |
| Medium | CVE-2023-39531 | Sentry vulnerable to incorrect credential validation on OAuth token requests | 6.5 | |
| Medium | CVE-2024-24829 | SSRF in Sentry via Phabricator integration | 4.3 | |
| Medium | CVE-2023-51451 | SSRF in symbolicator via invalid protocol | 4.3 | |
| Medium | CVE-2025-53073 | Sentry: Forced Browsing | 4.2 |
Products
| Sentry | 17 | 0 |