Skip to content
OpenAdvisories

Package · npm

@sentry/astro

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.1
    CVE-2025-65944

    Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

    Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has sendDefaultPii: true it is possible to inadvertently send certain sensitive HTTP headers, including the Co…

    getsentry sentry-javascript @sentry/nextjs @sentry/astro npm
  • Low 3.7
    GHSA-r5w7-f542-q2j4

    Potential DoS when using ContextLines integration

    ### Impact The [ContextLines integration](https://docs.sentry.io/platforms/javascript/guides/node/configuration/integrations/contextlines/) uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach…

    @sentry/nextjs @sentry/astro @sentry/sveltekit @sentry/aws-serverless npm
  • High 7.5
    CVE-2023-50249

    Sentry's Astro SDK vulnerable to ReDoS

    Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive …

    getsentry sentry-javascript @sentry/astro npm