Description
In case a Prototype Pollution vulnerability is present in a user’s application or bundled libraries, the Sentry SDK could potentially serve as a gadget to exploit that vulnerability. The exploitability depends on the specific details of the underlying Prototype Pollution issue.
Recommendation
Update the @sentry/browser package to the latest compatible version. Followings are version details:
Affected version(s): **< 7.119.1 >= 8.0.0-alpha.1, < 8.33.0** Patched version(s): **7.119.1 8.33.0**
References
Could your website be exposed too?
SmartScanner can check your website for Sentry SDK Prototype Pollution gadget in JavaScript SDKs and gives you actionable findings to investigate.
Start a free scanRelated Issues
- matrix-js-sdk Prototype Pollution vulnerability - CVE-2022-36059
- Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs - CVE-2025-62374
- LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set( - CVE-2026-40190
- Conform contains a Prototype Pollution Vulnerability in `parseWith...` function - CVE-2024-32866
You might also like:
See something that needs correcting? Let us knowUpdated October 04, 2024