Sentry Python SDK < 2.8.0 allows environment variables to be passed to subprocesses despite the `env={}` setting. Patched in sentry-sdk==2.8.0.
Reporter | Title | Published | Views | Family All 16 |
---|---|---|---|---|
![]() | CVE-2024-40647 Unintentional exposure of environment variables to subprocesses in sentry-sdk | 18 Jul 202416:51 | – | vulnrichment |
![]() | OPENSUSE-SU-2024:14209-1 python310-sentry-sdk-2.10.0-1.1 on GA media | 19 Jul 202400:00 | – | osv |
![]() | OPENSUSE-SU-2024:0214-1 Security update for python-sentry-sdk | 23 Jul 202409:17 | – | osv |
![]() | GHSA-G92J-QHMH-64V2 Sentry's Python SDK unintentionally exposes environment variables to subprocesses | 18 Jul 202417:18 | – | osv |
![]() | UBUNTU-CVE-2024-40647 | 18 Jul 202417:15 | – | osv |
![]() | CVE-2024-40647 | 18 Jul 202417:15 | – | osv |
![]() | CVE-2024-40647 Unintentional exposure of environment variables to subprocesses in sentry-sdk | 18 Jul 202416:51 | – | cvelist |
![]() | CVE-2024-40647 | 23 May 202507:32 | – | redhatcve |
![]() | Information Leakage | 19 Jul 202407:19 | – | veracode |
![]() | Linux Distros Unpatched Vulnerability : CVE-2024-40647 | 5 Mar 202500:00 | – | nessus |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo