@sentry/nextjs
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 4 advisory(ies) without a verdict
Advisories (4)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-2rmr-xw8m-22q9 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | 7.26.0 – < 7.77.0 | Undetermined |
| GHSA-6465-jgvq-jhgp Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true` | 10.11.0 – < 10.27.0 | Undetermined |
| GHSA-mchm-gjx6-7h55 Sentry-Javascript: Middleware Bypass when using Tunnel route | 9.36.0 – < 9.47.2 ; 10.0.0-alpha.0 – < 10.75.2 ; 11.0.0-alpha.0 – < 11.0.0-rc.1 | Undetermined |
| GHSA-r5w7-f542-q2j4 Potential DoS when using ContextLines integration | 8.10.0 – < 8.49.0 | Undetermined |
Sources
| Source | Licence |
|---|