Skip to content
OpenAdvisories

Product · getsentry

sentry-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • Medium 5.3
    CVE-2024-40647

    Unintentional exposure of environment variables to subprocesses in sentry-sdk

    sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses despite the `env={}` setting. In Python's `subprocess` calls, all environment variables are passed to subpr…

    getsentry sentry-python sentry-python sentry-sdk Debian Ubuntu PyPI
  • High 7.6
    CVE-2023-28117

    Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

    Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration of versions prior to 1.14.0 of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the se…

    getsentry sentry-python sentry-python sentry-sdk Ubuntu PyPI