Sentry's Astro SDK vulnerable to ReDoS

Description

A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry’s Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS).

Recommendation

Update the @sentry/astro package to the latest compatible version. Followings are version details:

• Affected version(s): >= 7.78.0, < 7.87.0
• Patched version(s): 7.87.0

References

• GHSA-x3v3-8xg8-8v72
• docs.sentry.io
• www.npmjs.com
• CVE-2023-50249
• CWE-1333
• CWE-400
• CAPEC-310
• OWASP 2021-A6

Related Issues

• pg-promise SQL Injection vulnerability - CVE-2025-29744
• crypto-js uses insecure random numbers - CVE-2020-36732
• njwt Prototype Pollution vulnerability - CVE-2024-34273
• Elliptic allows BER-encoded signatures - CVE-2024-42461

Tags:

npm

@sentry/astro