getsentry/sentry Security Advisories | GitStock

high2026-05-10

CVE-2021-47935-Sentry: Superusers can execute arbitrary commands by injecting malicious pickle-serialized objects through audit log entry data parameter

GHSA-444r-2whx-3685

critical2026-04-30

CVE-2026-42354-Sentry's improper authentication on SAML SSO process allows user identity linking

GHSA-rcmw-7mc7-3rj7

critical2026-04-17

CVE-2026-27197-Sentry: Improper authentication on SAML SSO process allows user identity linking

GHSA-ggmg-cqg6-j45g

critical2025-01-15

CVE-2025-22146-Sentry's improper authentication on SAML SSO process allows user impersonation

GHSA-7pq6-v88g-wf3w

medium2024-11-22

CVE-2024-53253-Sentry improper error handling leaks Application Integration Client Secret

GHSA-v5h2-q2w4-gpcx

high2024-09-17

CVE-2024-45606-Sentry improperly authorizes muting of alert rules

GHSA-v345-w9f2-mpm5

high2024-09-17

CVE-2024-45605-Sentry improperly authorizes deletion of user issue alert notifications

GHSA-54m3-95j9-v89j

high2024-07-23

CVE-2024-41656-Sentry vulnerable to stored Cross-Site Scripting (XSS)

GHSA-fm88-hc3v-3www

low2024-06-02

CVE-2024-35196-Slack integration leaks sensitive information in logs

GHSA-c2g2-gx4j-rj3j

high2024-04-18

CVE-2024-32474-Sentry vulnerable to leaking superuser cleartext password in logs

GHSA-6cjm-4pxw-7xp9

medium2023-08-09

CVE-2023-39531-Sentry vulnerable to incorrect credential validation on OAuth token requests

GHSA-hgj4-h2x3-rfx4

high2023-08-08

CVE-2023-39349-Privilege escalation via ApiTokensEndpoint

GHSA-9jcq-jf57-c62c

high2023-07-25

CVE-2023-36826-Improper authorization on debug and artifact file downloads

GHSA-m4hc-m2v6-hfw8

medium2023-07-06

CVE-2023-36829-Sentry CORS misconfiguration

GHSA-4xqm-4p72-87h6

medium2022-12-12

CVE-2022-23485-Sentry vulnerable to invite code reuse via cookie manipulation

GHSA-jv85-mqxj-3f9j