Skip to content
OpenAdvisories

Product · getsentry

sentry-javascript

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-114139

    Sentry-Javascript: Middleware Bypass when using Tunnel route

    Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel re…

    getsentry sentry-javascript @sentry/nextjs npm
  • Critical 9.3
    CVE-2023-46729

    Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

    sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This issue only affects users who have Next.js SDK tunnelin…

    getsentry sentry-javascript @sentry/nextjs npm