Medium
CVE-2026-47728
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
High
CVE-2026-22033
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
High
CVE-2024-45606
Sentry improperly authorizes muting of alert rules
High
CVE-2024-45605
Sentry improperly authorizes deletion of user issue alert notifications
High
CVE-2024-41656
Sentry vulnerable to stored Cross-Site Scripting (XSS)
Low
CVE-2024-40647
Sentry's Python SDK unintentionally exposes environment variables to subprocesses
Low
CVE-2024-35196
Slack integration leaks sensitive information in logs
High
CVE-2024-32474
Sentry vulnerable to leaking superuser cleartext password in logs
Medium
CVE-2023-39531
Sentry vulnerable to incorrect credential validation on OAuth token requests
High
CVE-2023-39349
Privilege escalation via ApiTokensEndpoint
High
CVE-2023-28117
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
High
CVE-2021-47935
Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log en
Critical
CVE-2026-42354
Sentry's improper authentication on SAML SSO process allows user identity linking
Critical
CVE-2026-27197
Sentry: Improper authentication on SAML SSO process allows user identity linking
High
CVE-2026-28490
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
Critical
CVE-2026-27614
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
Critical
CVE-2025-22146
Sentry's improper authentication on SAML SSO process allows user impersonation
Medium
CVE-2024-53253
Sentry improper error handling leaks Application Integration Client Secret
High
CVE-2023-36826
Improper authorization on debug and artifact file downloads
Medium
CVE-2023-36829
Sentry CORS misconfiguration
High
ghsa-cpmr-mw4j-99r7
Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
Medium
CVE-2022-23485
Sentry vulnerable to invite code reuse via cookie manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.