Suggestions search

Untriaged

Filter by:

With package: python312Packages.typesentry

Found 3 matching suggestions

View:

Compact

Detailed

Permalink CVE-2026-52794

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month ago Activity log

Created suggestion 1 month ago

Sentry: Inefficient Regular Expression Complexity in sentry

Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingestion pipeline, where a regex applied to attacker-controlled fields on incoming events can be made to consume disproportionate CPU time. This vulnerability is fixed in 26.5.2.

References

https://github.com/getsentry/sentry/security/advisories/GHSA-jjqr-wqg2-p856 x_refsource_CONFIRM
https://github.com/getsentry/sentry/pull/116587 x_refsource_MISC

Affected products

sentry

==>= 24.4.0, < 26.5.2

Matching in nixpkgs

pkgs.sentry-cli

Command line utility to work with Sentry

nixos-unstable 2.58.2
- nixpkgs-unstable 2.58.2
- nixos-unstable-small 2.58.2
nixos-26.05 2.58.2
- nixos-26.05-small 2.58.2
- nixpkgs-26.05-darwin 2.58.2

pkgs.sentry-native

Sentry SDK for C, C++ and native applications

nixos-unstable 0.14.0
- nixpkgs-unstable 0.14.0
- nixos-unstable-small 0.14.0
nixos-26.05 0.14.0
- nixos-26.05-small 0.14.0
- nixpkgs-26.05-darwin 0.14.0

pkgs.terraform-providers.sentry

None

nixos-unstable 0.15.1
- nixpkgs-unstable 0.15.1
- nixos-unstable-small 0.15.1
nixos-26.05 0.14.13
- nixos-26.05-small 0.14.13
- nixpkgs-26.05-darwin 0.14.13

pkgs.python312Packages.sentry-sdk

None

pkgs.python312Packages.typesentry

None

pkgs.python313Packages.sentry-sdk

Official Python SDK for Sentry.io

nixos-unstable 2.61.1
- nixpkgs-unstable 2.61.1
- nixos-unstable-small 2.61.1
nixos-26.05 2.60.0
- nixos-26.05-small 2.60.0
- nixpkgs-26.05-darwin 2.60.0

pkgs.python313Packages.typesentry

None

pkgs.python314Packages.sentry-sdk

Official Python SDK for Sentry.io

nixos-unstable 2.61.1
- nixpkgs-unstable 2.61.1
- nixos-unstable-small 2.61.1
nixos-26.05 2.60.0
- nixos-26.05-small 2.60.0
- nixpkgs-26.05-darwin 2.60.0

pkgs.python312Packages.policy-sentry

None

pkgs.python313Packages.policy-sentry

Python module for generating IAM least privilege policies

nixos-unstable 0.16.0
- nixpkgs-unstable 0.16.0
- nixos-unstable-small 0.16.0
nixos-26.05 0.16.0
- nixos-26.05-small 0.16.0
- nixpkgs-26.05-darwin 0.16.0

pkgs.python314Packages.policy-sentry

Python module for generating IAM least privilege policies

nixos-unstable 0.16.0
- nixpkgs-unstable 0.16.0
- nixos-unstable-small 0.16.0
nixos-26.05 0.16.0
- nixos-26.05-small 0.16.0
- nixpkgs-26.05-darwin 0.16.0

pkgs.terraform-providers.jianyuan_sentry

None

nixos-unstable 0.15.1
- nixpkgs-unstable 0.15.1
- nixos-unstable-small 0.15.1
nixos-26.05 0.14.13
- nixos-26.05-small 0.14.13
- nixpkgs-26.05-darwin 0.14.13

pkgs.home-assistant-component-tests.sentry

None

pkgs.grafanaPlugins.grafana-sentry-datasource

Integrate Sentry data into Grafana

nixos-unstable 2.2.1
- nixpkgs-unstable 2.2.1
- nixos-unstable-small 2.2.1
nixos-26.05 2.2.1
- nixos-26.05-small 2.2.1
- nixpkgs-26.05-darwin 2.2.1

Package maintainers

@arianvp Arian van Putten <arian.vanputten@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@Rizary Andika Demas Riyandi <andika@numtide.com>
@wheelsandmetal Jakob Schmutz <jakob@schmutz.co.uk>
@daniel-fahey Daniel Fahey <daniel.fahey+nixpkgs@pm.me>

Permalink CVE-2021-47935

8.7 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): High (H)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): High (H)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 months, 2 weeks ago Activity log

Created suggestion 2 months, 2 weeks ago

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint with base64-encoded compressed pickle payloads in the data field to achieve code execution with application privileges.

References

ExploitDB-50318 exploit
Product Reference product
VulnCheck Advisory: Sentry 8.2.0 Remote Code Execution via Pickle Deserialization third-party-advisory

Affected products

Sentry

==8.2.0

Matching in nixpkgs

pkgs.sentry-cli

Command line utility to work with Sentry

nixos-unstable 2.58.2
- nixpkgs-unstable 2.58.2
- nixos-unstable-small 2.58.2

pkgs.sentry-native

Sentry SDK for C, C++ and native applications

nixos-unstable 0.13.7
- nixpkgs-unstable 0.13.7
- nixos-unstable-small 0.13.7

pkgs.terraform-providers.sentry

None

nixos-unstable 0.14.13
- nixpkgs-unstable 0.14.13
- nixos-unstable-small 0.14.13

pkgs.python312Packages.sentry-sdk

None

pkgs.python312Packages.typesentry

None

pkgs.python313Packages.sentry-sdk

Official Python SDK for Sentry.io

nixos-unstable 2.59.0
- nixpkgs-unstable 2.59.0
- nixos-unstable-small 2.59.0

pkgs.python313Packages.typesentry

None

pkgs.python314Packages.sentry-sdk

Official Python SDK for Sentry.io

nixos-unstable 2.59.0
- nixpkgs-unstable 2.59.0
- nixos-unstable-small 2.59.0

pkgs.python312Packages.policy-sentry

None

pkgs.python313Packages.policy-sentry

Python module for generating IAM least privilege policies

nixos-unstable 0.15.1
- nixpkgs-unstable 0.15.1
- nixos-unstable-small 0.15.1

pkgs.python314Packages.policy-sentry

Python module for generating IAM least privilege policies

nixos-unstable 0.15.1
- nixpkgs-unstable 0.15.1
- nixos-unstable-small 0.15.1

pkgs.terraform-providers.jianyuan_sentry

None

nixos-unstable 0.14.13
- nixpkgs-unstable 0.14.13
- nixos-unstable-small 0.14.13

pkgs.home-assistant-component-tests.sentry

None

pkgs.grafanaPlugins.grafana-sentry-datasource

Integrate Sentry data into Grafana

nixos-unstable 2.2.1
- nixpkgs-unstable 2.2.1
- nixos-unstable-small 2.2.1

Package maintainers

@arianvp Arian van Putten <arian.vanputten@gmail.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@Rizary Andika Demas Riyandi <andika@numtide.com>
@wheelsandmetal Jakob Schmutz <jakob@schmutz.co.uk>
@daniel-fahey Daniel Fahey <daniel.fahey+nixpkgs@pm.me>

Permalink CVE-2026-26004

created 4 months, 1 week ago Activity log

Created suggestion 4 months, 1 week ago

Sentry allows unauthorized access to event data across organizational boundaries

Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.