sentry-javascript vulnerabilities

CVEs whose affected-version data names the sentry-javascript package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114139Critical· 9.1

yesterday

Sentry-Javascript: Middleware Bypass when using Tunnel route

Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRout…

▾ Midnightgetsentry · sentry-javascriptvia CVEORG