Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Description

An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user.

Recommendation

Update the @sentry/nextjs package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.26.0, < 7.77.0
• Patched version(s): 7.77.0

References

• GHSA-2rmr-xw8m-22q9
• blog.sentry.io
• docs.sentry.io
• www.npmjs.com
• CVE-2023-46729
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• Sentry's Astro SDK vulnerable to ReDoS - CVE-2023-50249
• fast-xml-parser vulnerable to Regex Injection via Doctype Entities - CVE-2023-34104
• axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL - CVE-2025-27152
• Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format - CVE-2025-64430

Tags:

npm

@sentry/nextjs