sentry-javascript vulnerabilities

2 known vulnerabilities in sentry-javascript from Getsentry. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  sentry-javascript: Protection Mechanism Failure

  CVE-2026-114139Oct 21, 2026Getsentry

  Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel rew

• 7.5 High severity

  sentry-javascript: Inefficient Regular Expression Complexity

  CVE-2023-50249Dec 20, 2023Getsentry

  Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive c