getsentry sentry-javascript vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20251
3. 20261

Newest CVEs

• CVE-2026-114139

  Sentry-Javascript: Middleware Bypass when using Tunnel route

  getsentry · sentry-javascript

  Critical9.1
• CVE-2025-65944

  Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

  getsentry · sentry-javascript

  Medium5.1
• CVE-2023-50249

  Sentry's Astro SDK vulnerable to ReDoS

  getsentry · sentry-javascript

  High7.5
• CVE-2023-46729

  Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

  getsentry · sentry-javascript

  Critical9.3