Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

getsentry/sentry-python

              master @ 0290953
            

Fixes

CVEs

MEDIUM

Peak severity

0.0%

Coverage

Highlights

Information Disclosure: 6 prior fixes. Scrutinize any change in this area.

sentry_sdk.integrations.httpx: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: Integrating web frameworks like Sanic without strict validation rules can leak sensitive user input embedded in request paths and HTTP queries, exposing PII if sentry telemetry options are misconfigured.

Information Disclosure: Common ASGI integrations process request paths and full URLs for a broad scope of applications, making them high-value points for unintentional transmission of query parameters.

Information Disclosure: HTTP client integrations automatically instrumentation outgoing requests; failing to sanitise these URLs can inadvertently leak authorization tokens or sensitive API keys contained in query strings.