CVE-2023-50249

Sentry-Javascript is official Sentry SDKs for JavaScript. A ReDoS (Regular expression Denial of Service) vulnerability has been identified in Sentry's Astro SDK 7.78.0-7.86.0. Under certain conditions, this vulnerability allows an attacker to cause excessive computation times on the server, leading to denial of service (DoS). This vulnerability has been patched in sentry/astro version 7.87.0.

• CWE-400
• CWE-1333

• https://github.com/getsentry/sentry-javascript/commit/fe24eb5eefa9d27b14b2b6f9ebd1debca1c208fbPatch
• https://github.com/getsentry/sentry-javascript/pull/9815Patch
• https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-x3v3-8xg8-8v72Vendor Advisory
• https://github.com/getsentry/sentry-javascript/commit/fe24eb5eefa9d27b14b2b6f9ebd1debca1c208fbPatch
• https://github.com/getsentry/sentry-javascript/pull/9815Patch
• https://github.com/getsentry/sentry-javascript/security/advisories/GHSA-x3v3-8xg8-8v72Vendor Advisory

Published

Dec 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50243Two stack-based buffer overflow vulnerabilities exist in the…7.2
• CVE-2023-50244Two stack-based buffer overflow vulnerabilities exist in the…7.2
• CVE-2023-50245OpenEXR-viewer is a viewer for OpenEXR files with detailed m…9.8
• CVE-2023-50246jq is a command-line JSON processor. Version 1.7 is vulnerab…5.5
• CVE-2023-50247h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2023-50248CKAN is an open-source data management system for powering d…6.5
• CVE-2023-5025A vulnerability was found in KOHA up to 23.05.03. It has bee…5.4
• CVE-2023-50250Cacti is an open source operational monitoring and fault man…6.1
• CVE-2023-50251php-svg-lib is an SVG file parsing / rendering library. Prio…7.5
• CVE-2023-50252php-svg-lib is an SVG file parsing / rendering library. Prio…9.8
• CVE-2023-50253Laf is a cloud development platform. In the Laf version desi…6.5
• CVE-2023-50254Deepin Linux's default document reader `deepin-reader` softw…7.8