Sentry Software Development Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:sentry:sentry_software_development_kit:*:*:*:*:*:next.js:*:*
part: a version: * update: *
| Vendor | Sentry (487dac9a-0194-5161-93b5-0efc83e96450) |
|---|---|
| Product | Sentry Software Development Kit (95ee5ee0-7f37-54c3-812f-c16376808d06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | next.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46729 |
vulnerable | 2026-06-08 06:14:23.052597 |
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
CRITICAL (9.3)
sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This issue only affects users who have Next.js SDK tunneling feature enabled. The problem has been fixed in version 7.77.0.
Published: 2023-11-10T00:57:15.611Z
Updated: 2024-09-03T17:44:32.064Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.