Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

Description

An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user.

Recommendation

Update the @sentry/nextjs package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.26.0, < 7.77.0
• Patched version(s): 7.77.0

References

• GHSA-2rmr-xw8m-22q9
• blog.sentry.io
• docs.sentry.io
• www.npmjs.com
• CVE-2023-46729
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• Axios is vulnerable to DoS attack through lack of data size check - CVE-2025-58754
• Potential DoS when using ContextLines integration (GHSA-r5w7-f542-q2j4) 4 - Vulnerability
• Parse Server's custom object ID allows to acquire role privileges - CVE-2024-47183
• XSS in jQuery as used in Drupal, Backdrop CMS, and other products - CVE-2019-11358

Tags:

npm

@sentry/nextjs