CVE Browser

Sentry: Unsafe pickle deserialization in Relocation Feature

Sentry: Inefficient Regular Expression Complexity in sentry

Sentry: Improper authentication on SAML SSO process allows user identity linking

Sentry allows unauthorized access to event data across organizational boundaries

Sentry: Improper Authentication on SAML SSO process allows user identity linking

Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Improper authentication on SAML SSO process allows user impersonation in sentry

Sentry's improper error handling leaks Application Integration Client Secret

Improper authorization on deletion of user issue alert notifications in sentry

Improper authorization on muting of alert rules in sentry

Sentry vulnerable to stored Cross-Site Scripting (XSS)

Unintentional exposure of environment variables to subprocesses in sentry-sdk

Slack integration leaks sensitive information in logs in Sentry

Sentry's superuser cleartext password leaked in logs

SSRF in Sentry via Phabricator integration

SSRF in symbolicator via invalid protocol

Sentry's Astro SDK vulnerable to ReDoS

Symbolicator Server Side Request Forgery vulnerability

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Sentry vulnerable to incorrect credential validation on OAuth token requests

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

Sentry vulnerable to improper authorization on debug and artifact file downloads

Sentry CORS misconfiguration vulnerability

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`