getsentry vulnerabilities
28 published CVEs name getsentry among the affected products.
- Published CVEs
- 28
- Last 12 months
- 8
- Critical
- 5
- Known exploited
- 0
Critical 5High 10Medium 12Low 1Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20239
- 20248
- 20253
- 20267
Newest CVEs
- CVE-2026-114139
Sentry-Javascript: Middleware Bypass when using Tunnel route
getsentry · sentry-javascript
Critical9.1 - CVE-2026-102899
Sentry: Improper authentication on SAML SSO process allows user identity linking
getsentry · sentry
High7.6 - CVE-2026-83803
Sentry: Unsafe pickle deserialization in Relocation Feature
getsentry · sentry
High7.7 - CVE-2026-52794
Sentry: Inefficient Regular Expression Complexity in sentry
getsentry · sentry
High7.5 - CVE-2026-42354
Sentry: Improper authentication on SAML SSO process allows user identity linking
getsentry · sentry
Critical9.1 - CVE-2026-26004
Sentry allows unauthorized access to event data across organizational boundaries
getsentry · sentry
Medium5.7 - CVE-2026-27197
Sentry: Improper Authentication on SAML SSO process allows user identity linking
getsentry · sentry
Critical9.1 - CVE-2025-65944
Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`
getsentry · sentry-javascript
Medium5.1 - CVE-2025-53099
Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
getsentry · sentry
Medium5.5 - CVE-2025-22146
Improper authentication on SAML SSO process allows user impersonation in sentry
getsentry · sentry
Critical9.1
Products with the most CVEs
Most common weaknesses
- CWE-287 Improper authentication5
- CWE-918 Server-side request forgery (SSRF)4
- CWE-639 Authorization bypass through a user-controlled key (IDOR)3
- CWE-1333 Regular expression denial of service (ReDoS)2
- CWE-201 2
- CWE-209 Sensitive information in an error message2
- CWE-284 Improper access control2
- CWE-863 Incorrect authorization2
- CWE-117 1
- CWE-200 Exposure of sensitive information1