Executive brief
Privilege escalation via ApiTokensEndpoint
Affected products
- PyPI sentry
Junglewise Threat Intelligence
CVE-2023-39349: PYSEC-2026-1912 - Privilege escalation via ApiTokensEndpoint
CVE-2023-39349 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: sentry (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1916 - Sentry improperly authorizes muting of alert rules
- PYSEC-2026-1910 - Sentry improperly authorizes deletion of user issue alert notifications
- PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)
- PYSEC-2026-1913 - Slack integration leaks sensitive information in logs
- PYSEC-2026-1911 - Sentry vulnerable to leaking superuser cleartext password in logs