Sentry records

21 published records for vendor sentry.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 81%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2026-42354No exploit	Sentry: Improper authentication on SAML SSO process allows user identity linkingsentry · sentry · CWE-290 Pre-auth Auth bypass	Critical9.8	—	0.7%	May 8, 2026
36Monitor	CVE-2026-27197No exploit	Sentry: Improper Authentication on SAML SSO process allows user identity linkingsentry · sentry · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.6%	Feb 21, 2026
34Monitor	CVE-2021-47935No exploit	Sentry 8.2.0 Remote Code Execution via Pickle Deserializationsentry · sentry · CWE-94 RCE Deserialization	High8.7	—	0.9%	May 10, 2026
32Monitor	CVE-2023-39349No exploit	Sentry vulnerable to privilege escalation via ApiTokensEndpointsentry · sentry · CWE-284 Broken access control (IDOR)	High8.1	—	1.1%	Aug 7, 2023
30Monitor	CVE-2023-50249No exploit	Sentry's Astro SDK vulnerable to ReDoSsentry · astro · CWE-400 Pre-auth Denial of service	High7.5	—	0.8%	Dec 20, 2023
30Monitor	CVE-2026-52794No exploit	Sentry: Inefficient Regular Expression Complexity in sentrysentry · sentry · CWE-1333 Pre-auth Denial of service	High7.5	—	0.5%	Jun 24, 2026
27Monitor	CVE-2023-39531No exploit	Sentry vulnerable to incorrect credential validation on OAuth token requestssentry · sentry · CWE-287 Auth bypass	Medium6.8	—	0.4%	Aug 9, 2023
26Monitor	CVE-2023-28117No exploit	Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`sentry · sentry software development kit · CWE-201	Medium6.5	—	0.6%	Mar 22, 2023
26Monitor	CVE-2023-36826No exploit	Sentry vulnerable to improper authorization on debug and artifact file downloadssentry · sentry · CWE-285 Broken access control (IDOR)	Medium6.5	—	0.6%	Jul 25, 2023
26Monitor	CVE-2024-32474No exploit	Sentry's superuser cleartext password leaked in logssentry · sentry · CWE-117	Medium6.5	—	0.4%	Apr 18, 2024
24Monitor	CVE-2023-46729No exploit	Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpointsentry · sentry software development kit · CWE-918 Pre-auth SSRF	Medium6.1	—	0.6%	Nov 9, 2023
22Monitor	CVE-2025-53099No exploit	Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocationsentry · sentry · CWE-288 Auth bypass Race condition	Medium5.5	—	0.7%	Jul 1, 2025
22Monitor	CVE-2026-26004No exploit	Sentry allows unauthorized access to event data across organizational boundariessentry · sentry · CWE-639 Broken access control (IDOR)	Medium5.7	—	0.4%	Mar 17, 2026
21Monitor	CVE-2024-53253No exploit	Sentry's improper error handling leaks Application Integration Client Secretsentry · sentry · CWE-209 Pre-auth Info leak	Medium5.3	—	0.7%	Nov 22, 2024
21Monitor	CVE-2024-24829No exploit	SSRF in Sentry via Phabricator integrationsentry · sentry · CWE-918 Pre-auth SSRF	Medium5.3	—	0.5%	Feb 8, 2024
21Monitor	CVE-2024-41656No exploit	Sentry vulnerable to stored Cross-Site Scripting (XSS)sentry · sentry · CWE-79 XSS	Medium5.4	—	0.5%	Jul 23, 2024
17Monitor	CVE-2023-49094No exploit	Symbolicator Server Side Request Forgery vulnerabilitysentry · symbolicator · CWE-918 SSRF	Medium4.3	—	0.7%	Nov 30, 2023
17Monitor	CVE-2023-51451No exploit	SSRF in symbolicator via invalid protocolsentry · symbolicator · CWE-918 SSRF	Medium4.3	—	0.5%	Dec 22, 2023
17Monitor	CVE-2024-45605No exploit	Improper authorization on deletion of user issue alert notifications in sentrysentry · sentry · CWE-639 Broken access control (IDOR)	Medium4.3	—	0.4%	Sep 17, 2024
17Monitor	CVE-2024-45606No exploit	Improper authorization on muting of alert rules in sentrysentry · sentry · CWE-639 Broken access control (IDOR)	Medium4.3	—	0.4%	Sep 17, 2024
14Monitor	CVE-2022-23485No exploit	Invite code reuse via cookie manipulation in sentrysentry · sentry · CWE-269 Pre-auth	Low3.7	—	0.4%	Dec 9, 2022

CVE-2026-42354
39Monitor
Sentry: Improper authentication on SAML SSO process allows user identity linking
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
sentry · sentryMay 8, 2026
CVE-2026-27197
36Monitor
Sentry: Improper Authentication on SAML SSO process allows user identity linking
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Auth bypass
sentry · sentryFeb 21, 2026
CVE-2021-47935
34Monitor
Sentry 8.2.0 Remote Code Execution via Pickle Deserialization
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Deserialization
sentry · sentryMay 10, 2026
CVE-2023-39349
32Monitor
Sentry vulnerable to privilege escalation via ApiTokensEndpoint
HighCVSS 8.1No exploitEPSS 1%
- Broken access control (IDOR)
sentry · sentryAug 7, 2023
CVE-2023-50249
30Monitor
Sentry's Astro SDK vulnerable to ReDoS
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
sentry · astroDec 20, 2023
CVE-2026-52794
30Monitor
Sentry: Inefficient Regular Expression Complexity in sentry
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
sentry · sentryJun 24, 2026
CVE-2023-39531
27Monitor
Sentry vulnerable to incorrect credential validation on OAuth token requests
MediumCVSS 6.8No exploitEPSS 0%
- Auth bypass
sentry · sentryAug 9, 2023
CVE-2023-28117
26Monitor
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
MediumCVSS 6.5No exploitEPSS 1%
sentry · sentry software development kitMar 22, 2023
CVE-2023-36826
26Monitor
Sentry vulnerable to improper authorization on debug and artifact file downloads
MediumCVSS 6.5No exploitEPSS 1%
- Broken access control (IDOR)
sentry · sentryJul 25, 2023
CVE-2024-32474
26Monitor
Sentry's superuser cleartext password leaked in logs
MediumCVSS 6.5No exploitEPSS 0%
sentry · sentryApr 18, 2024
CVE-2023-46729
24Monitor
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- SSRF
sentry · sentry software development kitNov 9, 2023
CVE-2025-53099
22Monitor
Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
MediumCVSS 5.5No exploitEPSS 1%
- Auth bypass
- Race condition
sentry · sentryJul 1, 2025
CVE-2026-26004
22Monitor
Sentry allows unauthorized access to event data across organizational boundaries
MediumCVSS 5.7No exploitEPSS 0%
- Broken access control (IDOR)
sentry · sentryMar 17, 2026
CVE-2024-53253
21Monitor
Sentry's improper error handling leaks Application Integration Client Secret
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Info leak
sentry · sentryNov 22, 2024
CVE-2024-24829
21Monitor
SSRF in Sentry via Phabricator integration
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- SSRF
sentry · sentryFeb 8, 2024
CVE-2024-41656
21Monitor
Sentry vulnerable to stored Cross-Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
sentry · sentryJul 23, 2024
CVE-2023-49094
17Monitor
Symbolicator Server Side Request Forgery vulnerability
MediumCVSS 4.3No exploitEPSS 1%
- SSRF
sentry · symbolicatorNov 30, 2023
CVE-2023-51451
17Monitor
SSRF in symbolicator via invalid protocol
MediumCVSS 4.3No exploitEPSS 0%
- SSRF
sentry · symbolicatorDec 22, 2023
CVE-2024-45605
17Monitor
Improper authorization on deletion of user issue alert notifications in sentry
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
sentry · sentrySep 17, 2024
CVE-2024-45606
17Monitor
Improper authorization on muting of alert rules in sentry
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
sentry · sentrySep 17, 2024
CVE-2022-23485
14Monitor
Invite code reuse via cookie manipulation in sentry
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
sentry · sentryDec 9, 2022