Skip to content
OpenAdvisories

Product · getsentry

sentry-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-40647

    Unintentional exposure of environment variables to subprocesses in sentry-sdk

    sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses despite the `env={}` setting. In Python's `subprocess` calls, all environment variables are passed to subpr…

    getsentry sentry-python sentry-python sentry-sdk Debian Ubuntu PyPI