Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Description

An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user.

Recommendation

Update the @sentry/nextjs package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.26.0, < 7.77.0
• Patched version(s): 7.77.0

References

• GHSA-2rmr-xw8m-22q9
• blog.sentry.io
• docs.sentry.io
• www.npmjs.com
• CVE-2023-46729
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• Sentry's Astro SDK vulnerable to ReDoS - CVE-2023-50249
• angular vulnerable to regular expression denial of service via the $resource service - CVE-2023-26117
• angular vulnerable to regular expression denial of service via the <input type="url"> element - CVE-2023-26118
• Parse Server vulnerable to user enumeration via email verification endpoint - CVE-2026-31901

Tags:

npm

@sentry/nextjs