CVE-2025-65944
12 advisories.
npm/@sentry/node CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/node to 10.27.0 or later.
npm i @sentry/node@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/astro CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/astro to 10.27.0 or later.
npm i @sentry/astro@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/astro
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/aws-serverless CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/aws-serverless to 10.27.0 or later.
npm i @sentry/aws-serverless@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/aws-serverless
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/bun CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/bun to 10.27.0 or later.
npm i @sentry/bun@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/bun
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/google-cloud-serverless CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/google-cloud-serverless to 10.27.0 or later.
npm i @sentry/google-cloud-serverless@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/google-cloud-serverless
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/nestjs CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/nestjs to 10.27.0 or later.
npm i @sentry/nestjs@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/nestjs
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/nextjs CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/nextjs to 10.27.0 or later.
npm i @sentry/nextjs@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/nextjs
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/node-core CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/node-core to 10.27.0 or later.
npm i @sentry/node-core@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/node-core
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/nuxt CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/nuxt to 10.27.0 or later.
npm i @sentry/nuxt@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/nuxt
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/remix CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/remix to 10.27.0 or later.
npm i @sentry/remix@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/remix
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/solidstart CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/solidstart to 10.27.0 or later.
npm i @sentry/solidstart@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/solidstart
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON
npm/@sentry/sveltekit CVE-2025-65944: medium
Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true`
Action: Upgrade @sentry/sveltekit to 10.27.0 or later.
npm i @sentry/sveltekit@10.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.11.0 | 10.27.0 | - |
Fixed versions
| 10.27.0 |
Sources
- osv: GHSA-6465-jgvq-jhgp#npm/@sentry/sveltekit
- https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-6465-jgvq-jhgp
- https://nvd.nist.gov/vuln/detail/CVE-2025-65944
- https://github.com/getsentry/sentry-javascript/pull/17475
- https://github.com/getsentry/sentry-javascript/pull/18311
- https://github.com/getsentry/sentry-javascript/commit/a820fa2891fdcf985b834a5b557edf351ec54539
- https://github.com/getsentry/sentry-javascript
- https://github.com/getsentry/sentry-javascript/releases
- https://github.com/getsentry/sentry-javascript/releases/tag/10.11.0
- https://github.com/getsentry/sentry-javascript/releases/tag/10.27.0
CVE-2025-65944 · published · modified · JSON