Insertion of Sensitive Information Into Sent Data

Overview @sentry/astro is an Official Sentry SDK for Astro Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication cookies, by...

Sentry Astro SDK Resource Management Error Vulnerability

Mobileiron Sentry is a Smart Gateway product from Mobileiron, Inc. A resource management error vulnerability exists in Sentry Astro SDK versions 7.78.0 through 7.86.0, which stems from the presence of a regular expression denial of service ReDoS vulnerability...

Sentry's Astro SDK vulnerable to ReDoS

Impact A ReDoS Regular expression Denial of Service vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service DoS. Applications that are...