{"action":"Upgrade sentry to 26.4.1 or later.","affected":[{"fixed":"26.4.1","introduced":"21.12.0"}],"component":"sentry","cve_ids":["CVE-2026-42354"],"ecosystem":"PyPI","epss":0.00623,"exploited":false,"fixed_versions":["26.4.1"],"ghsa_id":"GHSA-rcmw-7mc7-3rj7","id":"tcs_01M5KFXR2KNH4TD8DYER93WP4X","modified_at":"2026-06-29T12:26:42.468679036Z","published_at":"2026-04-30T20:44:24Z","references":["https://osv.dev/vulnerability/GHSA-rcmw-7mc7-3rj7","https://github.com/getsentry/sentry/security/advisories/GHSA-rcmw-7mc7-3rj7","https://nvd.nist.gov/vuln/detail/CVE-2026-42354","https://github.com/getsentry/sentry/pull/113720","https://github.com/getsentry/sentry/commit/0c67558ae7fe08738912d4c5233b53ead048da3b","https://github.com/getsentry/sentry","https://github.com/getsentry/sentry/releases/tag/26.4.1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-rcmw-7mc7-3rj7","url":"https://osv.dev/vulnerability/GHSA-rcmw-7mc7-3rj7"}],"summary":"Sentry's improper authentication on SAML SSO process allows user identity linking"}