CVE-2026-42354 Sentry: Improper authentication on SAML SSO process allows user identity linking

Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity...

PT-2026-36821

Name of the Vulnerable Software and Affected Versions Sentry versions 21.12.0 through 26.4.0 Description A flaw in the SAML SSO implementation allows attackers to take over user accounts in multi-org instances through malicious Identity Providers. If a victim's email is known, an attacker can...

The vulnerability of the authentication and authorization protocol used by software for generating real-time failure reports in Sentry allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the authentication and authorization protocol used by Sentry software for generating real-time failure reports is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent...

The vulnerability of the client tool library for the Sentry SDK platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the client tool library for the Sentry SDK monitoring platform is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

EUVD-2024-22192

Malicious code in bioql PyPI...

EUVD-2024-3383

Malicious code in bioql PyPI...

EUVD-2023-2258

Malicious code in bioql PyPI...

EUVD-2024-2875

Malicious code in bioql PyPI...

EUVD-2024-2337

Malicious code in bioql PyPI...

EUVD-2022-0277

Malicious code in bioql PyPI...

CVE-2024-45605

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-24829

Sentry is an error tracking and performance monitoring platform. Sentry’s integration platform provides a way for external services to interact with Sentry. One of such integrations, the Phabricator integration maintained by Sentry with version =24.1.1 contains a constrained SSRF vulnerability. A...

CVE-2024-45606

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we...

raven-ruby 'okjson_spec.rb' denial of service vulnerability

Sentry is a Python real-time logging platform built on Django. raven-ruby is a Ruby client for Sentry. A denial of service vulnerability exists in raven-ruby 'okjsonspec.rb', which can be exploited by an attacker to crash an affected application and deny service to legitimate users...