PyPI/sentry-sdk CVE-2023-28117: high 7.6, EPSS 0.65%

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

Action: Upgrade sentry-sdk to 1.14.0 or later.

pip install sentry-sdk==1.14.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-920
• https://github.com/getsentry/sentry-python/security/advisories/GHSA-29pr-6jr8-q5jm
• https://nvd.nist.gov/vuln/detail/CVE-2023-28117
• https://github.com/getsentry/sentry-python/pull/1842
• https://github.com/getsentry/sentry-python
• https://github.com/getsentry/sentry-python/releases/tag/1.14.0
• https://pypi.org/project/sentry-sdk
• https://github.com/advisories/GHSA-29pr-6jr8-q5jm

CVE-2023-28117 · published 2026-07-07T10:17:28.471226Z · modified 2026-07-07T11:45:22.029710566Z · JSON