sentry-javascript
- Software type
- Software development kit
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/24/2026, sentry-javascript recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of sentry-javascript and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel routeCVE-2025-65944Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true`CVE-2023-50249Sentry's Astro SDK vulnerable to ReDoSCVE-2023-46729Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-114139Sentry-Javascript: Middleware Bypass when using Tunnel route | Exploitation statusNot confirmed | FixYes | Published10/21/2026 | SeverityCritical |
CVE-2025-65944Sentry-Javascript deals with leaked sensitive headers when `sendDefaultPii` is set to `true` | Exploitation statusNot exploited | FixYes | Published11/25/2025 | SeverityMedium |
CVE-2023-50249Sentry's Astro SDK vulnerable to ReDoS | Exploitation statusNot confirmed | FixYes | Published12/20/2023 | SeverityHigh |
CVE-2023-46729Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | Exploitation statusNot exploited | FixYes | Published11/10/2023 | SeverityCritical |
4 Results | Page 1 of 1