What’s Vulnerable › Products

getsentry sentry-javascript vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your getsentry sentry-javascript version is affected

Latest getsentry sentry-javascript vulnerabilities

• CVE-2026-114139 — Sentry-Javascript: Middleware Bypass when using Tunnel route (CVSS 9.1)
• CVE-2025-65944 — Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` (CVSS 5.1)
• CVE-2024-40647 — Unintentional exposure of environment variables to subprocesses in sentry-sdk (CVSS 5.3)
• CVE-2023-46729 — Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint (CVSS 6.1)
• CVE-2023-28117 — Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` (CVSS 6.5)