Getsentry · product
sentry
20 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.
- Sentry vulnerable to privilege escalation via ApiTokensEndpoint
- Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
- Sentry CORS misconfiguration vulnerability
- Sentry's improper error handling leaks Application Integration Client Secret
- Sentry vulnerable to improper authorization on debug and artifact file downloads
- Sentry: Improper authentication on SAML SSO process allows user identity linking
- Improper authentication on SAML SSO process allows user impersonation in sentry
- Sentry: Unsafe pickle deserialization in Relocation Feature
- Slack integration leaks sensitive information in logs in Sentry
- Sentry: Inefficient Regular Expression Complexity in sentry
- Sentry: Improper Authentication on SAML SSO process allows user identity linking
- SSRF in Sentry via Phabricator integration
- Sentry vulnerable to stored Cross-Site Scripting (XSS)
- Invite code reuse via cookie manipulation in sentry
- Sentry's superuser cleartext password leaked in logs
- Improper authorization on deletion of user issue alert notifications in sentry
- Sentry: Improper authentication on SAML SSO process allows user identity linking
- Improper authorization on muting of alert rules in sentry
- Sentry vulnerable to incorrect credential validation on OAuth token requests
- Sentry allows unauthorized access to event data across organizational boundaries
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.