GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: zizmor, linkerd-network-validator, linkerd-extension-init, lakekeeper, komodo, mise, tealdeer, samply, asciinema, sqlx, linkerd2, parseable, ntpd-rs, xh, buck2, wasmtime, kdash, rye, ztunnel-fips, rustup, zellij, berg, garage, uv, zola, sccache, zed, wasm-pack,...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: zizmor, linkerd-network-validator, linkerd-extension-init, lakekeeper, komodo, mise, tealdeer, samply, asciinema, sqlx, linkerd2, parseable, ntpd-rs, xh, buck2, wasmtime, kdash, rye, ztunnel-fips, rustup, zellij, berg, garage, uv, zola, sccache, zed, wasm-pack,...

PT-2026-33535

The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sys int syscall familly. Prior to version 0.4.7, this can lead to DoS and...

NI LabVIEW < 2023 Q3 Patch 9 / 2024.x < 2024 Q3 Patch 6 / 2025.x < 2025 Q3 Patch 4 / 2026.x < 2026 Q1 Patch 1 Multiple Memory Corruption Vulnerabilities

The version of National Instruments NI LabVIEW installed on the remote Windows host is affected by multiple memory corruption vulnerabilities that may result in information disclosure or arbitrary code execution, including the following: - There is an out-of-bounds read vulnerability in...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-sentry-sdk: python3-sentry-sdk+aiohttp-2.48.0-4.1.hum1 noarch python3-sentry-sdk+asyncpg-2.48.0-4.1.hum1 noarch python3-sentry-sdk+bottle-2.48.0-4.1.hum1 noarch...

CVE-2026-32863 Out-of-Bounds Read in sentry_transaction_context_set_operation()

There is a memory corruption vulnerability due to an out-of-bounds read in sentrytransactioncontextsetoperation in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafte...

CVE-2021-27184

Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability exploitable via the DTD parameter entities technique, resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band OOB attack. The vulnerability is triggered when input passed to...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

Sentry Authentication Bypass

The vulnerability of the authentication and authorization protocol used by Sentry software for generating real-time failure reports is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent...

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

CVE-2026-26004: Authorization Bypass Through User-Controlled Key

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

Sentry security vulnerabilities

Sentry is an open-source error tracking and performance monitoring platform for developers. Versions of Sentry prior to 26.1.0 contained a security vulnerability, which stemmed from an insecure direct object reference in the GroupEventJsonView endpoint across organizations...

CVE-2026-26004

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

EUVD-2026-12673

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

CVE-2026-26004 Sentry allows unauthorized access to event data across organizational boundaries

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

CVE-2026-26004 Sentry allows unauthorized access to event data across organizational boundaries

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue...

PT-2026-25961

Name of the Vulnerable Software and Affected Versions Sentry versions prior to 26.1.0 Description Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference IDOR issue in the GroupEventJsonView...

irisapi (>=1.0.0, <=1.0.3), sentry (>=7.7.1, <=7.7.4) +1 more potentially affected by CVE-2025-69534 via markdown (2.4.1)

markdown PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on markdown and may be impacted: - irisapi =1.0.0, =7.7.1, =0.3.3, =0.3.4 Source cves: CVE-2025-69534 Source advisory: OSV:GHSA-5WMX-573V-2QWQ...

irisapi (>=1.0.0, <=1.0.3), sentry (>=7.7.1, <=7.7.4) +1 more potentially affected by CVE-2025-69534 via markdown (2.4.1)

markdown PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on markdown and may be impacted: - irisapi =1.0.0, =7.7.1, =0.3.3, =0.3.4 Source cves: CVE-2025-69534 Source advisory: OSV:PYSEC-2026-89...