debian/sentry-python vulnerabilities

Latest debian/sentry-python CVEs

Newest publication first

1. CVE-2024-40647 Sentry's Python SDK unintentionally exposes environment variables to subprocesses

   Medium·CVSS 5.3

   sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses despite the env={} setting. In Python's subprocess calls, all environment variables are passed to subprocesses by default. Howev...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.