Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

getsentry/sentry-java

              main @ d8b6ce1
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

sentry-android-replay: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: Truncation of sub-pixel bounding boxes to zero-width/height integers during dimension conversion allowed sensitive Jetpack Compose components to escape visual masking during Session Replay. Future UI rendering or masking utilities must use rounding-outward strategies to guarantee bounding box containment.

Auth Bypass: Weak validation of organization identifiers during the parsing of incoming W3C trace propagation contexts allowed potential cross-organization trace continuation. Trace context propagation must strictly validate the tenant identity of remote parents before inheriting span properties.