{"action":"Upgrade sentry to 26.4.1 or later.","affected":[{"fixed":"26.4.1","introduced":"21.12.0"}],"component":"sentry","cve_ids":["CVE-2026-42354"],"ecosystem":"PyPI","epss":0.00623,"exploited":false,"fixed_versions":["26.4.1"],"ghsa_id":"GHSA-rcmw-7mc7-3rj7","id":"tcs_01M5KHBZEZVC229THKMT3NZA8B","modified_at":"2026-07-13T16:15:34.059184196Z","published_at":"2026-06-29T11:50:46.679170Z","references":["https://osv.dev/vulnerability/PYSEC-2026-534","https://github.com/getsentry/sentry/security/advisories/GHSA-rcmw-7mc7-3rj7","https://nvd.nist.gov/vuln/detail/CVE-2026-42354","https://github.com/getsentry/sentry/pull/113720","https://github.com/getsentry/sentry/commit/0c67558ae7fe08738912d4c5233b53ead048da3b","https://github.com/getsentry/sentry","https://github.com/getsentry/sentry/releases/tag/26.4.1","https://pypi.org/project/sentry","https://github.com/advisories/GHSA-rcmw-7mc7-3rj7"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-534","url":"https://osv.dev/vulnerability/PYSEC-2026-534"}],"summary":"Sentry's improper authentication on SAML SSO process allows user identity linking"}