Insertion of Sensitive Information Into Sent Data

Overview @sentry/cloudflare is an Official Sentry SDK for Cloudflare Workers and Pages Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as...

@sentry/nuxt (>=10.11.0, <=10.26.0), @sentry/sveltekit (>=10.11.0, <=10.26.0) potentially affected by CVE-2025-65944 via @sentry/cloudflare (>=10.11.0, <=10.26.0)

@sentry/cloudflare NPM version =10.11.0, =10.11.0, =10.11.0, =10.26.0 Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYCLOUDFLARE-14105052...