CVE-2023-50249
1 advisory.
npm/@sentry/astro CVE-2023-50249: high 7.5, EPSS 0.78%
Sentry's Astro SDK vulnerable to ReDoS
Action: Upgrade @sentry/astro to 7.87.0 or later.
npm i @sentry/astro@7.87.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.78.0 | 7.87.0 | - |
Fixed versions
| 7.87.0 |
Sources
- osv: GHSA-x3v3-8xg8-8v72
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-x3v3-8xg8-8v72
- https://nvd.nist.gov/vuln/detail/CVE-2023-50249
- https://github.com/getsentry/sentry-javascript/pull/9815
- https://github.com/getsentry/sentry-javascript/commit/fe24eb5eefa9d27b14b2b6f9ebd1debca1c208fb
- https://docs.sentry.io/platforms/javascript/guides/astro/manual-setup/#disable-auto-server-instrumentation
- https://github.com/getsentry/sentry-javascript
- https://www.npmjs.com/package/@sentry/astro/v/7.87.0
CVE-2023-50249 · published · modified · JSON