SE
Vendor
Sentry
23
CVEs
0
On KEV
0
New 30D
Products
SE9.8
Sentry
Sentry
18 CVEs0 on KEV0 new
SS6.5
Sentry Software Development Kit
Sentry
2 CVEs0 on KEV0 new
SY4.3
Symbolicator
Sentry
2 CVEs0 on KEV0 new
AS7.5
Astro
Sentry
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-52794 | SE Sentry Sentry | 7.5 | Jun 24 | Sentry: Inefficient Regular Expression Complexity in sentry |
| CVE-2021-47935 | SE Sentry Sentry | 8.8 | May 10 | Sentry 8.2.0 Remote Code Execution via Pickle Deserialization |
| CVE-2026-42354 | SE Sentry Sentry | 9.8 | May 8 | Sentry: Improper authentication on SAML SSO process allows user identity linking |
| CVE-2026-26004 | SE Sentry Sentry | 6.5 | Mar 17 | Sentry allows unauthorized access to event data across organizational boundaries |
| CVE-2026-27197 | SE Sentry Sentry | 9.1 | Feb 21 | Sentry: Improper Authentication on SAML SSO process allows user identity linking |
| CVE-2025-53099 | SE Sentry Sentry | 7.5 | Jul 1 | Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation |
| CVE-2025-53073 | SE Sentry Sentry | 4.2 | Jun 24 | In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member… |
| CVE-2024-53253 | SE Sentry Sentry | 5.3 | Nov 22 | Sentry's improper error handling leaks Application Integration Client Secret |
| CVE-2024-45605 | SE Sentry Sentry | 4.3 | Sep 17 | Improper authorization on deletion of user issue alert notifications in sentry |
| CVE-2024-45606 | SE Sentry Sentry | 4.3 | Sep 17 | Improper authorization on muting of alert rules in sentry |
| CVE-2024-41656 | SE Sentry Sentry | 5.4 | Jul 23 | Sentry vulnerable to stored Cross-Site Scripting (XSS) |
| CVE-2024-32474 | SE Sentry Sentry | 6.5 | Apr 18 | Sentry's superuser cleartext password leaked in logs |
| CVE-2024-24829 | SE Sentry Sentry | 5.3 | Feb 8 | SSRF in Sentry via Phabricator integration |
| CVE-2023-51451 | SY Symbolicator Sentry | 4.3 | Dec 22 | SSRF in symbolicator via invalid protocol |
| CVE-2023-50249 | AS Astro Sentry | 7.5 | Dec 20 | Sentry's Astro SDK vulnerable to ReDoS |
| CVE-2023-49094 | SY Symbolicator Sentry | 4.3 | Nov 30 | Symbolicator Server Side Request Forgery vulnerability |
| CVE-2023-46729 | SS Sentry Software Development Kit Sentry | 6.1 | Nov 10 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint |
| CVE-2023-39531 | SE Sentry Sentry | 6.8 | Aug 9 | Sentry vulnerable to incorrect credential validation on OAuth token requests |
| CVE-2023-39349 | SE Sentry Sentry | 8.1 | Aug 7 | Sentry vulnerable to privilege escalation via ApiTokensEndpoint |
| CVE-2023-36826 | SE Sentry Sentry | 6.5 | Jul 25 | Sentry vulnerable to improper authorization on debug and artifact file downloads |
| CVE-2023-36829 | SE Sentry Sentry | 5.4 | Jul 6 | Sentry CORS misconfiguration vulnerability |
| CVE-2023-28117 | SS Sentry Software Development Kit Sentry | 6.5 | Mar 22 | Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` |
| CVE-2022-23485 | SE Sentry Sentry | 3.7 | Dec 10 | Invite code reuse via cookie manipulation in sentry |