Skip to content
OpenAdvisories

Package · npm

@sentry/node

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.1
    CVE-2025-65944

    Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

    Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has sendDefaultPii: true it is possible to inadvertently send certain sensitive HTTP headers, including the Co…

    getsentry sentry-javascript @sentry/nextjs @sentry/astro npm
  • Low 3.7
    GHSA-r5w7-f542-q2j4

    Potential DoS when using ContextLines integration

    ### Impact The [ContextLines integration](https://docs.sentry.io/platforms/javascript/guides/node/configuration/integrations/contextlines/) uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach…

    @sentry/nextjs @sentry/astro @sentry/nuxt @sentry/solidstart npm