Executive brief
Sentry vulnerable to stored Cross-Site Scripting (XSS)
Affected products
- PyPI sentry
Junglewise Threat Intelligence
CVE-2024-41656: PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)
CVE-2024-41656 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: sentry (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1916 - Sentry improperly authorizes muting of alert rules
- PYSEC-2026-1910 - Sentry improperly authorizes deletion of user issue alert notifications
- PYSEC-2026-1913 - Slack integration leaks sensitive information in logs
- PYSEC-2026-1911 - Sentry vulnerable to leaking superuser cleartext password in logs
- PYSEC-2026-1915 - Sentry vulnerable to incorrect credential validation on OAuth token requests