Skip to content

fast-xml-parser vulnerabilities in getsentry/sentry-javascript #19449

New issue
New issue
Closed
#19433
Closed
fast-xml-parser vulnerabilities in getsentry/sentry-javascript#19449
#19433
Assignees
Lms24
Labels
SecuritySupply-Chain-Vuln

Description

@linear
linear
bot
opened on Feb 20, 2026

Repo: getsentry/sentry-javascript
Confidence: Conditionally Reachable
Severity: High
Weakness: ssc-0b7d4178-d392-4265-849c-06d24b859e82

To reduce risk of accidental information disclosure, we are intentionally not exposing full vulnerability details here
Please see the parent ticket or Semgrep Console for more details: https://semgrep.dev/orgs/sentry/findings/700731690

Activity

  1. linear
    added
    Security
    on Feb 20, 2026

  2. linear commented on Feb 20, 2026

    @linear
    linearBot
    on Feb 20, 2026 – with Linear
    Author

    JS-1771

  3. linear
    added
    Supply-Chain-Vuln
    on Feb 20, 2026
  4. Lms24
    self-assigned this
    on Feb 20, 2026

  5. Lms24 commented on Feb 20, 2026

    @Lms24
    Lms24
    on Feb 20, 2026
    Member

    already fixed in #19433

  6. Lms24
    closed this as completedin b3d336con Feb 20, 2026
  7. pull
    added a commit that references this issue on Feb 20, 2026

    chore(deps): Bump transitive dep `fast-xml-parser` (getsentry#19433)

    b3d336c

  8. github-actions commented on Feb 24, 2026

    @github-actions
    github-actionsBot
    on Feb 24, 2026 – with GitHub Actions
    Contributor

    A PR closing this issue has just been released 🚀

    This issue was referenced by PR #19433, which was included in the 10.40.0 release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

SecuritySupply-Chain-Vuln

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions