Malicious code in sentry-utils (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in sentry-bundler-plugin-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f46a47bc2b07ff75d14f1b6152b8663f7e39ad961b754ee7de5c8e8f390c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

Enables an authenticated user enrolled device to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access...

CVE-2023-39338

The CVE-2023-39338 entry concerns Ivanti Sentry (and related Sentry implementations) where an authenticated user on an enrolled device can reach a service protected by Sentry without authorization via tunnel access. The available documents describe the vulnerability’s impact (unauthorized tunnel ...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

Ivanti Sentry 安全漏洞

Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. used to manage, encrypt, and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry that stems from an authenticated user being able to access Sentry-protected services, eve...

MAL-2025-5795 Malicious code in sentry-eslint-config-internal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ba8b7f921d459f28baff326f2eb32b49ed229eb7e2d551526035c8fcb2b420 Any computer that has this package installed or running should be considered...

CVE-2025-53099

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to a race condition in handleasyncdeletion, invoked during the authorization flow. An attacker who can convince a user to authorize an app can maintain unauthorized access to...

cbs-sentry-dingding (=1.0.24), cbs-sentry-qyweixin (=1.0.1) +47 more potentially affected by CVE-2025-53099 via sentry (=20.8.0)

sentry PYPI version =20.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentry and may be impacted: - cbs-sentry-dingding =1.0.24 - cbs-sentry-qyweixin =1.0.1 - csnp =0.0.5, =1.0.0, =0.2.4, =1.0.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0 and more Source cve...

CVE-2025-53099

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

CVE-2025-53099 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

CVE-2025-53099 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

CVE-2025-53099

CVE-2025-53099 affects Sentry prior to 25.5.0. A race condition in handling of OAuth authorization codes could allow a malicious OAuth app to maintain persistence on a user’s account via timed requests/redirect flows and multiple authorization codes. The issue is mitigated by upgrading self-hoste...

CVE-2025-53099 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...

PT-2025-27554 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry versions prior to 25.5.0 Description: The issue allows an attacker with a malicious OAuth application registered with Sentry to take advantage of a race condition and improper handling of authorization code within Sentry, maintaining...

Sentry 安全漏洞

Sentry is a developer-oriented bug tracking and performance monitoring platform from Sentry Open Source. A security vulnerability exists in versions of Sentry prior to 25.5.0 that stems from mishandling of competitive conditions and authorization code that may be used as a way to keep user accoun...