CVE-2026-42354 Sentry: Improper authentication on SAML SSO process allows user identity linking

Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity...

PT-2026-36821

Name of the Vulnerable Software and Affected Versions Sentry versions 21.12.0 through 26.4.0 Description A flaw in the SAML SSO implementation allows attackers to take over user accounts in multi-org instances through malicious Identity Providers. If a victim's email is known, an attacker can...

EUVD-2024-22192

Malicious code in bioql PyPI...

EUVD-2024-3383

Malicious code in bioql PyPI...

EUVD-2022-0277

Malicious code in bioql PyPI...

EUVD-2024-2875

Malicious code in bioql PyPI...

EUVD-2024-2337

Malicious code in bioql PyPI...

EUVD-2023-2258

Malicious code in bioql PyPI...

CVE-2024-45605

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-24829

Sentry is an error tracking and performance monitoring platform. Sentry’s integration platform provides a way for external services to interact with Sentry. One of such integrations, the Phabricator integration maintained by Sentry with version =24.1.1 contains a constrained SSRF vulnerability. A...

CVE-2024-45606

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we...

raven-ruby 'okjson_spec.rb' denial of service vulnerability

Sentry is a Python real-time logging platform built on Django. raven-ruby is a Ruby client for Sentry. A denial of service vulnerability exists in raven-ruby 'okjsonspec.rb', which can be exploited by an attacker to crash an affected application and deny service to legitimate users...