Linux Distros Unpatched Vulnerability : CVE-2022-4365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all version...

Linux Distros Unpatched Vulnerability : CVE-2023-4378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all version...

Linux Distros Unpatched Vulnerability : CVE-2021-22256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status...

Malicious code in request-sentry (npm)

The package request-sentry was found to contain malicious code...

MAL-2025-32111 Malicious code in request-sentry (npm)

The package request-sentry was found to contain malicious code...

Malicious code in sentry-sdk-browser-extension (npm)

The package sentry-sdk-browser-extension was found to contain malicious code...

MAL-2025-32954 Malicious code in sentry-sdk-browser-extension (npm)

The package sentry-sdk-browser-extension was found to contain malicious code...

MAL-2025-6758 Malicious code in sentry-core (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in sentry-core (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6759 Malicious code in sentry-utils (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in sentry-utils (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in sentry-bundler-plugin-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f46a47bc2b07ff75d14f1b6152b8663f7e39ad961b754ee7de5c8e8f390c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in sentry-bundler-plugin-dev

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

The CVE-2023-39338 entry concerns Ivanti Sentry (and related Sentry implementations) where an authenticated user on an enrolled device can reach a service protected by Sentry without authorization via tunnel access. The available documents describe the vulnerability’s impact (unauthorized tunnel ...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

Ivanti Sentry security vulnerabilities

Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. used to manage, encrypt, and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry that stems from an authenticated user being able to access Sentry-protected services, eve...