wandb (>=0.6.21, <=0.6.26) potentially affected by CVE-2024-40647 via sentry-sdk (0.4.0)

sentry-sdk PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - wandb =0.6.21, =0.6.26 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

webspace (>=2.7.84, <=2.7.89) potentially affected by CVE-2024-40647 via sentry-sdk (0.16.1)

sentry-sdk PYPI version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - webspace =2.7.84, =2.7.89 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

saltdash (0.9.6) potentially affected by CVE-2024-40647 via sentry-sdk (0.7.10)

sentry-sdk PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - saltdash 0.9.6 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

appel-crises (>=0.0.9, <=0.0.37), parsec-cloud (>=1.14.0rc3, <=2.4.2) +3 more potentially affected by CVE-2024-40647 via sentry-sdk (0.14.3)

sentry-sdk PYPI version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - appel-crises =0.0.9, =1.14.0rc3, =0.9.7, =5.0.0, =0.3.10, =0.3.11 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

portfolio-website (>=1.1.2, <=1.1.6) potentially affected by CVE-2024-40647 via sentry-sdk (0.10.0)

sentry-sdk PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - portfolio-website =1.1.2, =1.1.6 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

zogutils (>=1.0.0, <=1.5.1) potentially affected by CVE-2024-40647 via sentry-sdk (0.19.0)

sentry-sdk PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - zogutils =1.0.0, =1.5.1 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

sentry-chalice (0.1.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.16.2)

sentry-sdk PYPI version 0.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - sentry-chalice 0.1.0 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

drf-httpsig (>=1.0.0, <=1.0.2), sentry (>=7.7.1, <=7.7.4) potentially affected by CVE-2024-21520 via djangorestframework (2.3.14)

djangorestframework PYPI version 2.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on djangorestframework and may be impacted: - drf-httpsig =1.0.0, =7.7.1, =7.7.4 Source cves: CVE-2024-21520 Source advisory: OSV:PYSEC-2026-1304...

PYSEC-2026-1911 Sentry vulnerable to leaking superuser cleartext password in logs

Impact When authenticating as a superuser to a self-hosted Sentry instance with a username and password, the password is leaked as cleartext in logs under the event: auth-index.validatesuperuser. An attacker with access to the log data could use these leaked credentials to login to the Sentry...

Sentry vulnerable to leaking superuser cleartext password in logs

ImpactWhen authenticating as a superuser to a self-hosted Sentry instance with a username and password, the password is leaked as cleartext in logs under the event: auth-index.validatesuperuser. An attacker with access to the log data could use these leaked credentials to login to the Sentry syst...

Sentry vulnerable to incorrect credential validation on OAuth token requests

ImpactAn attacker with sufficient client-side exploits could retrieve a valid access token for another user during the OAuth token exchange due to incorrect credential validation. The client ID must be known and the API application must have already been authorized on the targeted user account...

cbs-sentry-dingding (1.0.24), cbs-sentry-qyweixin (1.0.1) +47 more potentially affected by CVE-2023-39531 via sentry (20.8.0)

sentry PYPI version 20.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry and may be impacted: - cbs-sentry-dingding 1.0.24 - cbs-sentry-qyweixin 1.0.1 - csnp =0.0.5, =1.0.0, =0.2.4, =1.0.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0 and more Source cves:...

elice-backend-components (>=18.10.4.0, <=18.11.3.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.4.3)

sentry-sdk PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - elice-backend-components =18.10.4.0, =18.11.3.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

fastlane (>=0.1.0, <=2.2.3) potentially affected by CVE-2023-28117 via sentry-sdk (0.5.5)

sentry-sdk PYPI version 0.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - fastlane =0.1.0, =2.2.3 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

1a23-telemetry (1.0.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.6.9)

sentry-sdk PYPI version 0.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - 1a23-telemetry 1.0.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

richie (>=1.0.0b2, <=1.0.0b3), robotoff (>=1.0.6, <=1.0.12) potentially affected by CVE-2023-28117 via sentry-sdk (0.7.6)

sentry-sdk PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - richie =1.0.0b2, =1.0.6, =1.0.12 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

kolibri-sentry-plugin (>=0.0.1, <=0.1.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.7.9)

sentry-sdk PYPI version 0.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - kolibri-sentry-plugin =0.0.1, =0.1.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

portfolio-website (>=1.1.2, <=1.1.6) potentially affected by CVE-2023-28117 via sentry-sdk (0.10.0)

sentry-sdk PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - portfolio-website =1.1.2, =1.1.6 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

scrapy-sentry-sdk (0.4.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.9.5)

sentry-sdk PYPI version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - scrapy-sentry-sdk 0.4.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

cobras (>=1.6.6, <=1.7.6) potentially affected by CVE-2023-28117 via sentry-sdk (0.11.1)

sentry-sdk PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =1.6.6, =1.7.6 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...