Description
SDK versions between and including 5.16.0 and 5.19.0 allowed Sentry auth tokens to be set in the optional authToken configuration parameter, for debugging purposes.
Recommendation
Update the @sentry/react-native package to the latest compatible version. Followings are version details:
- Affected version(s): >= 5.16.0, <= 5.19.0
- Patched version(s): 5.19.1
References
Could your website be exposed too?
SmartScanner can check your website for Potential leakage of Sentry auth tokens by React Native SDK with Expo plugin and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Potential DoS when using ContextLines integration - @sentry/astro - Vulnerability
- Malicious Package in react-server-native - Vulnerability
- Potential DoS when using ContextLines integration - @sentry/bun - Vulnerability
- Potential DoS when using ContextLines integration - @sentry/nextjs - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated March 21, 2026