SE
Product
Sentry
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 11Low 1
Watch
Add Sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39531 | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests Affected: 10.0.0 before 23.7.2 |
| CVE-2026-26004 | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries Affected: before 26.1.0 |
| CVE-2024-32474 | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs Affected: 24.3.0 before 24.4.1 |
| CVE-2023-36826 | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads Affected: 8.21.0 before 23.5.2 |
| CVE-2024-41656 | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) Affected: 10.0.0 before 24.7.1 |
| CVE-2023-36829 | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability Affected: 23.6.0 before 23.6.2 |
| CVE-2024-53253 | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret Affected: 24.11.0 |
| CVE-2024-24829 | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration Affected: 9.1.0 before 24.1.2 |
| CVE-2024-45605 | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry Affected: 23.9.0 before 24.9.0 |
| CVE-2024-45606 | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry Affected: 23.4.0 before 24.9.0 |
| CVE-2025-53073 | 4.2 | Jun 24 | In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member… Affected: 25.1.0 through 25.5.1 |
Showing 11