Executive brief
Sentry vulnerable to incorrect credential validation on OAuth token requests
Affected products
- PyPI sentry
Junglewise Threat Intelligence
CVE-2023-39531: PYSEC-2026-1915 - Sentry vulnerable to incorrect credential validation on OAuth token requests
CVE-2023-39531 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: sentry (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1916 - Sentry improperly authorizes muting of alert rules
- PYSEC-2026-1910 - Sentry improperly authorizes deletion of user issue alert notifications
- PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)
- PYSEC-2026-1913 - Slack integration leaks sensitive information in logs
- PYSEC-2026-1911 - Sentry vulnerable to leaking superuser cleartext password in logs