Nixpkgs security tracker
Untriaged
Activity log
- Created suggestion
Sentry allows unauthorized access to event data across organizational boundaries
Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.
References
-
https://securitylab.github.com/advisories/GHSL-2025-130_Sentry/ x_refsource_CONFIRM
-
https://github.com/getsentry/sentry/pull/105601 x_refsource_MISC
Affected products
sentry
- ==< 26.1.0
Matching in nixpkgs
pkgs.sentry-cli
Command line utility to work with Sentry
pkgs.sentry-native
Sentry SDK for C, C++ and native applications
pkgs.terraform-providers.sentry
None
-
nixos-26.05 -
- nixos-26.05-small 0.14.13
pkgs.python313Packages.sentry-sdk
Official Python SDK for Sentry.io
pkgs.python314Packages.sentry-sdk
Official Python SDK for Sentry.io
pkgs.python313Packages.policy-sentry
Python module for generating IAM least privilege policies
pkgs.python314Packages.policy-sentry
Python module for generating IAM least privilege policies
pkgs.terraform-providers.jianyuan_sentry
None
pkgs.grafanaPlugins.grafana-sentry-datasource
Integrate Sentry data into Grafana
Package maintainers
-
@arianvp Arian van Putten <arian.vanputten@gmail.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@Rizary Andika Demas Riyandi <andika@numtide.com>
-
@wheelsandmetal Jakob Schmutz <jakob@schmutz.co.uk>
-
@daniel-fahey Daniel Fahey <daniel.fahey+nixpkgs@pm.me>