sentry
26.10.1Developer-first error tracking and performance monitoring
- Maintenance
- Active7427 commits in 3 months · bus factor 15
- License
- FSL-1.1-Apache-2.0Source-available · not OSI-approved · changed in 2023
- Security
- 22 advisories6 critical, 6 high, 8 medium, 2 low · Scorecard 6.0/10
- Supported versions
- No scheduleendoflife.date does not track this project
45.8k stars · 5k forks · 2.2k open issues · last release 17 days ago · data checked 21 minutes ago
Security advisories
All advisories on GitHubThe 22 most recent advisories published by the maintainers: 6 critical, 6 high, 8 medium, 2 low. Check the patched version against the one you run.
- highGHSA-88p9-44cg-fr2qOct 19, 2026Improper email matching in SAML SSO process allows account takeover
- Affected
- 22.2.0
- Patched in
- 26.10.0
- criticalGHSA-rrcx-889m-5jj5Aug 17, 2026Improper authentication on SAML SSO allows unauthorized organization member addition or identity linking
- Affected
- < 20.6.0
- Patched in
- 26.8.0
- criticalCVE-2026-102899Jul 24, 2026Improper authentication on SAML SSO process allows user identity linking
- Affected
- >= 26.5.0, <= 26.7.1
- Patched in
- 26.7.2
- criticalCVE-2026-83803Jul 16, 2026Unsafe pickle deserialization in Relocation Feature
- Affected
- >= 23.11.0, < 26.7.0
- Patched in
- 26.7.0
- lowGHSA-fx76-375g-xq25Jun 5, 2026Attempts at prompt injection and supply chain compromise with public Data Source Names (DSNs)
- Affected
- >= 26.5.1
- highCVE-2026-52794Jun 3, 2026Inefficient Regular Expression Complexity in Sentry
- Affected
- >= 24.4.0, < 26.5.2
- Patched in
- 26.5.2
- criticalCVE-2026-42354Apr 22, 2026Improper authentication on SAML SSO process allows user identity linking
- Affected
- >= 21.12.0, < 26.4.0
- Patched in
- 26.4.1
- criticalCVE-2026-27197Feb 18, 2026Improper authentication on SAML SSO process allows user identity linking
- Affected
- >= 21.12.0, < 26.2.0
- Patched in
- 26.2.0
- mediumCVE-2025-53099Jun 30, 2025Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation
- Affected
- <25.5.0
- Patched in
- 25.5.0
- criticalCVE-2025-22146Jan 15, 2025Improper authentication on SAML SSO process allows user impersonation
- Affected
- >=21.12.0, <=24.12.1
- Patched in
- 25.1.0
- mediumCVE-2024-53253Nov 22, 2024Improper error handling leaks Application Integration Client Secret
- Affected
- 24.11.0
- Patched in
- >= 24.11.1
- mediumCVE-2024-45605Sep 17, 2024Improper authorization on deletion of user issue alert notifications
- Affected
- >=23.9.0, <= 24.8.0
- Patched in
- 24.9.0
- mediumCVE-2024-45606Sep 17, 2024Improper authorization on muting of alert rules
- Affected
- >=23.4.0, <=24.8.0
- Patched in
- 24.9.0
- highCVE-2024-41656Jul 23, 2024Stored XSS via integration external issues
- Affected
- >=10.0.0, <24.7.1
- Patched in
- 24.7.1
- lowCVE-2024-35196May 31, 2024Slack integration leaks deprecated verification token in logs
- Affected
- >=24.3.0,<24.5.0
- Patched in
- 24.5.0
- highCVE-2024-32474Apr 18, 2024Superuser cleartext password leaked in logs
- Affected
- >=24.3.0, <24.4.1
- Patched in
- 24.4.1
- mediumCVE-2024-24829Feb 8, 2024SSRF via Phabricator integration
- Affected
- >=9.1.0, <24.1.2
- Patched in
- 24.1.2
- mediumCVE-2023-39531Aug 9, 2023Incorrect credential validation on OAuth token requests
- Affected
- >=10.0.0,<=23.7.1
- Patched in
- 23.7.2
- highCVE-2023-39349Aug 7, 2023Privilege escalation via ApiTokensEndpoint
- Affected
- >=22.1.0, <23.7.2
- Patched in
- 23.7.2
- highCVE-2023-36826Jul 25, 2023Improper authorization on debug and artifact file downloads
- Affected
- >=8.21.0, <23.5.2
- Patched in
- 23.5.2
- mediumCVE-2023-36829Jul 6, 2023CORS misconfiguration
- Affected
- >=23.6.0, <23.6.2
- Patched in
- 23.6.2
- mediumCVE-2022-23485Dec 10, 2022Invite code reuse via cookie manipulation
- Affected
- >= 20.6.0, <=22.10.0
- Patched in
- 22.11.0