Skip to content
OpenAdvisories

Product · getsentry

sentry-javascript

4 known vulnerabilities.

All Critical High Medium Low Exploited only

4 results · Feed

  • Critical 9.1
    CVE-2026-114139

    Sentry-Javascript: Middleware Bypass when using Tunnel route

    Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel re…

    getsentry sentry-javascript @sentry/nextjs npm
  • Medium 5.1
    CVE-2025-65944

    Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`

    Sentry-Javascript is an official Sentry SDKs for JavaScript. From version 10.11.0 to before 10.27.0, when a Node.js application using the Sentry SDK has sendDefaultPii: true it is possible to inadvertently send certain sensitive HTTP headers, including the Co…

    getsentry sentry-javascript @sentry/nextjs @sentry/astro npm
  • High 7.5
    CVE-2023-50249

    Sentry's Astro SDK vulnerable to ReDoS

    Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive …

    getsentry sentry-javascript @sentry/astro npm
  • Critical 9.3
    CVE-2023-46729

    Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

    sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This issue only affects users who have Next.js SDK tunnelin…

    getsentry sentry-javascript @sentry/nextjs npm