Sentry's Astro SDK vulnerable to ReDoS

Description

A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry’s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS).

Recommendation

Update the @sentry/astro package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.78.0, < 7.87.0
• Patched version(s): 7.87.0

References

• GHSA-x3v3-8xg8-8v72
• docs.sentry.io
• www.npmjs.com
• CVE-2023-50249
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Sentry's sensitive headers are leaked when `sendDefaultPii` is set to `true` (GHSA-6465-jgvq-jhgp) 9 - CVE-2025-65944
• pg-promise SQL Injection vulnerability - CVE-2025-29744
• Potential DoS when using ContextLines integration (GHSA-r5w7-f542-q2j4) 9 - Vulnerability
• crypto-js uses insecure random numbers - CVE-2020-36732

Tags:

npm

@sentry/astro