https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:54:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-10364 EUVD-2026-10364 https://cve.radiocsirt.org/vuln/euvd-2026-10364 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50249 <p>Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry&#39;s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS). This vulnerability has been patched in sentry/astro version 7.87.0.</p> <p>Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry&#39;s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS). This vulnerability has been patched in sentry/astro version 7.87.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50249 https://cve.radiocsirt.org/vuln/ghsa-x3v3-8xg8-8v72 <p><strong>Affected:</strong> npm: @sentry/astro</p> <p>### Impact A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry&#39;s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS).</p> <p>Applications that are using Sentry&#39;s Astro SDK are affected if:</p> <p>1. They&#39;re using Sentry instrumentation: - they have [manually registered](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#manually-add-server-instrumentation) Sentry Middleware (affected versions 7.78.0-7.86.0); - or [configured](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#configure-server-instrumentation) Astro in SSR (server) or hybrid mode, use Astro 3.5.0 and newer and didn’t [disable the automatic server instrumentation](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#disable-auto-server-instrumentation) (affected versions 7.82.0-7.86.0). 2. They have configured routes with at least two path params (e.g. `/foo/[p1]/bar/[p2]`).</p> <p>### Patches The problem has been patched in [@sentry/astro@7.87.0](https://www.npmjs.com/package/@sentry/astro/v/7.87.0). The corresponding PR: https://github.com/getsentry/sentry-javascript/pull/9815</p> <p>### Workarounds We strongly recommend upgrading to the latest SDK version. However, if it&#39;s not possible, the steps to mitigate the vulnerability without upgrade are: * [disable auto instrumentation](https://docs.sentry.io/platfo…</p> <p><strong>Affected:</strong> npm: @sentry/astro</p> <p>### Impact A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry&#39;s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS).</p> <p>Applications that are using Sentry&#39;s Astro SDK are affected if:</p> <p>1. They&#39;re using Sentry instrumentation: - they have [manually registered](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#manually-add-server-instrumentation) Sentry Middleware (affected versions 7.78.0-7.86.0); - or [configured](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#configure-server-instrumentation) Astro in SSR (server) or hybrid mode, use Astro 3.5.0 and newer and didn’t [disable the automatic server instrumentation](https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#disable-auto-server-instrumentation) (affected versions 7.82.0-7.86.0). 2. They have configured routes with at least two path params (e.g. `/foo/[p1]/bar/[p2]`).</p> <p>### Patches The problem has been patched in [@sentry/astro@7.87.0](https://www.npmjs.com/package/@sentry/astro/v/7.87.0). The corresponding PR: https://github.com/getsentry/sentry-javascript/pull/9815</p> <p>### Workarounds We strongly recommend upgrading to the latest SDK version. However, if it&#39;s not possible, the steps to mitigate the vulnerability without upgrade are: * [disable auto instrumentation](https://docs.sentry.io/platfo…</p> https://cve.radiocsirt.org/vuln/ghsa-x3v3-8xg8-8v72 https://cve.radiocsirt.org/vuln/gsd-2023-50249 gsd-2023-50249 https://cve.radiocsirt.org/vuln/gsd-2023-50249