# sentry (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/pypi-sentry Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/pypi-sentry.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 15 vulnerabilities in sentry (PyPI): 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2024-45606, was published on 7 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 15 (2 critical, 0 exploited in the wild) ## About sentry (PyPI) Python SDK for the Sentry error tracking and application monitoring platform. ## Latest sentry (PyPI) vulnerabilities - [CVE-2024-45606: PYSEC-2026-1916 - Sentry improperly authorizes muting of alert rules](https://junglewise.ai/threats/cve-2024-45606-sentry-improperly-authorizes-muting-of-alert-rules) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-45605: PYSEC-2026-1910 - Sentry improperly authorizes deletion of user issue alert notifications](https://junglewise.ai/threats/cve-2024-45605-sentry-improperly-authorizes-deletion-of-user-issue-alert) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-41656: PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)](https://junglewise.ai/threats/cve-2024-41656-sentry-vulnerable-to-stored-cross-site-scripting-xss) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-35196: PYSEC-2026-1913 - Slack integration leaks sensitive information in logs](https://junglewise.ai/threats/cve-2024-35196-slack-integration-leaks-sensitive-information-in-logs) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-32474: PYSEC-2026-1911 - Sentry vulnerable to leaking superuser cleartext password in logs](https://junglewise.ai/threats/cve-2024-32474-sentry-vulnerable-to-leaking-superuser-cleartext-password-in-logs) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2023-39531: PYSEC-2026-1915 - Sentry vulnerable to incorrect credential validation on OAuth token requests](https://junglewise.ai/threats/cve-2023-39531-sentry-vulnerable-to-incorrect-credential-validation-on-oauth) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2023-39349: PYSEC-2026-1912 - Privilege escalation via ApiTokensEndpoint](https://junglewise.ai/threats/cve-2023-39349-privilege-escalation-via-apitokensendpoint) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2025-22146: PYSEC-2026-532 - Sentry's improper authentication on SAML SSO process allows user impersonation](https://junglewise.ai/threats/cve-2025-22146-sentry-s-improper-authentication-on-saml-sso-process-allows-user) (low, CVSS 3.1, published 29 Jun 2026) - [CVE-2021-47935: Sentry insecure pickle deserialization in admin audit log](https://junglewise.ai/threats/cve-2021-47935-sentry-insecure-pickle-deserialization-in-admin-audit-log) (high, CVSS 8.8, published 10 May 2026) - [CVE-2026-42354: Sentry account takeover via SAML SSO identity spoofing](https://junglewise.ai/threats/cve-2026-42354-sentry-account-takeover-via-saml-sso-identity-spoofing) (critical, CVSS 9.1, published 8 May 2026) - [CVE-2026-27197: Sentry improper authentication in SAML SSO process](https://junglewise.ai/threats/cve-2026-27197-sentry-improper-authentication-in-saml-sso-process) (critical, CVSS 9.1, published 17 Apr 2026) - [CVE-2024-53253: Sentry information disclosure in Search UI component error handling](https://junglewise.ai/threats/cve-2024-53253-sentry-information-disclosure-in-search-ui-component-error) (medium, CVSS 5.3, published 22 Nov 2024) - [CVE-2023-36826: Improper authorization on debug and artifact file downloads](https://junglewise.ai/threats/cve-2023-36826-improper-authorization-on-debug-and-artifact-file-downloads) (low, CVSS 3.1, published 25 Jul 2023) - [CVE-2023-36829: Sentry CORS misconfiguration](https://junglewise.ai/threats/cve-2023-36829-sentry-cors-misconfiguration) (low, CVSS 3.1, published 6 Jul 2023) - [CVE-2022-23485: Sentry vulnerable to invite code reuse via cookie manipulation](https://junglewise.ai/threats/cve-2022-23485-sentry-vulnerable-to-invite-code-reuse-via-cookie-manipulation) (low, CVSS 3.1, published 10 Dec 2022) ## Most severe sentry (PyPI) vulnerabilities - [CVE-2026-42354: Sentry account takeover via SAML SSO identity spoofing](https://junglewise.ai/threats/cve-2026-42354-sentry-account-takeover-via-saml-sso-identity-spoofing) (critical, CVSS 9.1, published 8 May 2026) - [CVE-2026-27197: Sentry improper authentication in SAML SSO process](https://junglewise.ai/threats/cve-2026-27197-sentry-improper-authentication-in-saml-sso-process) (critical, CVSS 9.1, published 17 Apr 2026) - [CVE-2021-47935: Sentry insecure pickle deserialization in admin audit log](https://junglewise.ai/threats/cve-2021-47935-sentry-insecure-pickle-deserialization-in-admin-audit-log) (high, CVSS 8.8, published 10 May 2026) - [CVE-2024-53253: Sentry information disclosure in Search UI component error handling](https://junglewise.ai/threats/cve-2024-53253-sentry-information-disclosure-in-search-ui-component-error) (medium, CVSS 5.3, published 22 Nov 2024) - [CVE-2023-39349: PYSEC-2026-1912 - Privilege escalation via ApiTokensEndpoint](https://junglewise.ai/threats/cve-2023-39349-privilege-escalation-via-apitokensendpoint) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2023-36829: Sentry CORS misconfiguration](https://junglewise.ai/threats/cve-2023-36829-sentry-cors-misconfiguration) (low, CVSS 3.1, published 6 Jul 2023) - [CVE-2023-36826: Improper authorization on debug and artifact file downloads](https://junglewise.ai/threats/cve-2023-36826-improper-authorization-on-debug-and-artifact-file-downloads) (low, CVSS 3.1, published 25 Jul 2023) - [CVE-2025-22146: PYSEC-2026-532 - Sentry's improper authentication on SAML SSO process allows user impersonation](https://junglewise.ai/threats/cve-2025-22146-sentry-s-improper-authentication-on-saml-sso-process-allows-user) (low, CVSS 3.1, published 29 Jun 2026) - [CVE-2024-35196: PYSEC-2026-1913 - Slack integration leaks sensitive information in logs](https://junglewise.ai/threats/cve-2024-35196-slack-integration-leaks-sensitive-information-in-logs) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-41656: PYSEC-2026-1914 - Sentry vulnerable to stored Cross-Site Scripting (XSS)](https://junglewise.ai/threats/cve-2024-41656-sentry-vulnerable-to-stored-cross-site-scripting-xss) (low, CVSS 3.1, published 7 Jul 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "sentry (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/pypi-sentry, 13 November 2026.