sentry-sdk

The official Python SDK for Sentry.io

View on Pypi

View on Github

Activity

Latest release: 3d ago
Total releases: 355
Cadence: ~5 days
Last 12 months: 51

Reach

Stars: 2.2k

Details

License: MIT
First release: Jul 26, 2018

Releases

Version	Released
`3.0.0b2` pre	Oct 27, 2026
`2.73.0` minor	Oct 22, 2026
`3.0.0b1` pre	Oct 21, 2026
`2.72.0` minor	Oct 12, 2026
`2.71.0` minor	Sep 28, 2026
`2.70.0` minor	Sep 22, 2026
`2.69.2` patch	Sep 15, 2026
`2.69.1` patch	Sep 08, 2026
`2.69.0` minor	Sep 08, 2026
`2.68.1` patch	Aug 24, 2026
`2.68.0` minor	Aug 13, 2026
`2.67.1` patch	Aug 10, 2026
`2.67.0` minor	Aug 10, 2026
`2.66.1` patch	Jul 22, 2026
`2.66.0` minor	Jul 16, 2026
`2.65.0` minor	Jul 13, 2026
`2.64.0` minor	Jun 30, 2026
`2.63.0` minor	Jun 16, 2026
`2.62.0` minor	Jun 08, 2026
`2.61.1` patch	Jun 01, 2026
`2.61.0` minor	May 28, 2026
`2.60.0` minor	May 13, 2026
`2.59.0a2` pre	May 08, 2026
`2.59.0a1` pre	May 05, 2026
`2.59.0` minor	May 04, 2026
`2.58.0a1` pre	Apr 21, 2026
`2.58.0` minor	Apr 13, 2026
`2.57.0` minor	Mar 31, 2026
`2.52.0a9` pre	Mar 26, 2026
`2.56.0` minor	Mar 24, 2026
`2.55.0` minor	Mar 17, 2026
`2.52.0a8` pre	Mar 03, 2026
`2.54.0` minor	Mar 02, 2026
`2.52.0a7` pre	Feb 25, 2026
`2.52.0a6` pre	Feb 23, 2026
`2.53.0` minor	Feb 16, 2026
`2.52.0a5` pre	Feb 12, 2026
`2.52.0a4` pre	Feb 10, 2026
`2.52.0a3` pre	Feb 09, 2026
`2.52.0` minor	Feb 04, 2026
`2.52.0a2` pre	Feb 02, 2026
`2.52.0a1` pre	Feb 02, 2026
`2.51.0` minor	Jan 28, 2026
`2.51.0a1` pre	Jan 28, 2026
`2.50.0` minor	Jan 20, 2026
`2.49.0` minor	Jan 08, 2026
`2.48.0` minor	Dec 16, 2025
`2.47.0` minor	Dec 03, 2025
`2.46.0` minor	Nov 24, 2025
`2.45.0` minor	Nov 18, 2025

1–50 of 355

Repository

getsentry/sentry-python

Forks: 698
Open issues: 353
Language: Python
: 5.9/ 10

sentry
python
sentry-python
crash-reporting
hacktoberfest
tag-production

Dependencies (13)

Depends on

3.0.0b2

Supply-chain exposure

Known CVEs (2)

CVE-2024-40647 PYSEC-2026-1917 GHSA-g92j-qhmh-64v2 Jul 07, 2026

Sentry's Python SDK unintentionally exposes environment variables to subprocesses

Low
Local Low High None

Impact

The bug in Sentry's Python SDK <2.8.0 results in the unintentional exposure of environment variables to subprocesses despite the env={} setting.

Details

In Python's subprocess calls, all environment variables are passed to subprocesses by default. However, if you specifically do not want them to be passed to subprocesses, you may use env argument in subprocess calls, like in this example:

>>> subprocess.check_output(["env"], env={"TEST":"1"}) b'TEST=1\n'

If you'd want to not pass any variables, you can set an empty dict:

>>> subprocess.check_output(["env"], env={}) b''

However, the bug in Sentry SDK <2.8.0 causes all environment variables to be passed to the subprocesses when env={} is set, unless the Sentry SDK's Stdlib integration is disabled. The Stdlib integration is enabled by default.

Patches

The issue has been patched in https://github.com/getsentry/sentry-python/pull/3251 and the fix released in sentry-sdk==2.8.0. The fix was also backported to sentry-sdk==1.45.1.

Workarounds

We strongly recommend upgrading to the latest SDK version. However, if it's not possible, and if passing environment variables to child processes poses a security risk for you, there are two options:

In your application, replace env={} with the minimal dict env={"EMPTY_ENV":"1"} or similar.

OR

Disable Stdlib integration:

import sentry_sdk # Should go before sentry_sdk.init sentry_sdk.integrations._DEFAULT_INTEGRATIONS.remove("sentry_sdk.integrations.stdlib.StdlibIntegration") sentry_sdk.init(...)

References

Sentry docs: Default integrations

Python docs: subprocess module

Patch https://github.com/getsentry/sentry-python/pull/3251

Affected versions

0.1.00.1.0rc10.1.0rc100.1.0rc110.1.0rc120.1.0rc130.1.0rc140.1.0rc150.1.0rc160.1.0rc20.1.0rc30.1.0rc4

+ 234 more Show less

0.1.0rc50.1.0rc60.1.0rc70.1.0rc80.1.0rc90.1.10.1.20.1.30.10.00.10.10.10.20.11.00.11.10.11.20.12.00.12.10.12.20.12.30.13.00.13.10.13.20.13.30.13.40.13.50.14.00.14.10.14.20.14.30.14.40.15.00.15.10.16.00.16.10.16.20.16.30.16.40.16.50.17.00.17.10.17.20.17.30.17.40.17.50.17.60.17.70.17.80.18.00.19.00.19.10.19.20.19.30.19.40.19.50.2.10.2.20.20.00.20.10.20.20.20.30.3.00.3.10.3.100.3.110.3.20.3.30.3.40.3.50.3.60.3.70.3.80.3.90.4.00.4.10.4.20.4.30.5.00.5.10.5.20.5.30.5.40.5.50.6.00.6.10.6.20.6.30.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.100.7.110.7.120.7.130.7.140.7.20.7.30.7.40.7.50.7.60.7.70.7.80.7.90.8.00.8.10.9.00.9.10.9.20.9.30.9.40.9.51.0.01.1.01.10.01.10.11.11.01.11.11.12.01.12.11.13.01.14.01.15.01.16.01.17.01.18.01.19.01.19.11.2.01.20.01.21.01.21.11.22.01.22.11.22.21.23.01.23.11.24.01.25.01.25.11.26.01.27.01.27.11.28.01.28.11.29.01.29.11.29.21.3.01.3.11.30.01.31.01.32.01.33.01.33.11.34.01.35.01.36.01.37.01.37.11.38.01.39.01.39.11.39.21.4.01.4.11.4.21.4.31.40.01.40.11.40.21.40.31.40.41.40.51.40.61.41.01.42.01.43.01.44.01.44.11.45.01.5.01.5.11.5.101.5.111.5.121.5.21.5.31.5.41.5.51.5.61.5.71.5.81.5.91.6.01.7.01.7.11.7.21.8.01.9.01.9.11.9.101.9.21.9.31.9.41.9.51.9.61.9.71.9.81.9.92.0.02.0.0a12.0.0a22.0.0rc12.0.0rc22.0.0rc32.0.0rc42.0.0rc52.0.0rc62.0.12.1.02.1.12.2.02.2.12.3.02.3.12.4.02.5.02.5.12.6.02.7.02.7.1

Fixed in

1.45.12.8.0

References

https://github.com/getsentry/sentry-python/security/advisories/GHSA-g92j-qhmh-64v2
https://nvd.nist.gov/vuln/detail/CVE-2024-40647
https://github.com/getsentry/sentry-python/pull/3251
https://github.com/getsentry/sentry-python/commit/763e40aa4cb57ecced467f48f78f335c87e9bdff
https://docs.python.org/3/library/subprocess.html
https://docs.sentry.io/platforms/python/integrations/default-integrations

Updated Jul 07, 2026 · Source: OSV.dev
CVE-2023-28117 PYSEC-2026-920 GHSA-29pr-6jr8-q5jm Jul 07, 2026

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

7.6 / 10
High
Network Low High None Changed High Low None

Impact

When using the Django integration of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the session cookie to Sentry. These sensitive cookies could then be used by someone with access to your Sentry issues to impersonate or escalate their privileges within your application.

The below must be true in order for these sensitive values to be leaked:

Your Sentry SDK configuration has sendDefaultPII set to True

You are using a custom name for either of the cookies below in your Django settings.

SESSION_COOKIE_NAME or

CSRF_COOKIE_NAME Django settings

You are not configured in your organization or project settings to use our data scrubbing features to account for the custom cookie names

Patches

As of version 1.14.0, the Django integration of the sentry-sdk will detect the custom cookie names based on your Django settings and will remove the values from the payload before sending the data to Sentry.

Workarounds

If you can not update your sentry-sdk to a patched version than you can use the SDKs filtering mechanism to remove the cookies from the payload that is sent to Sentry. For error events this can be done with the before_send callback method and for performance related events (transactions) you can use the before_send_transaction callback method.

If you'd like to handle filtering of these values on the server-side, you can also use our advanced data scrubbing feature to account for the custom cookie names. Look for the $http.cookies, $http.headers, $request.cookies, or $request.headers fields to target with your scrubbing rule.

References

Using Your Tools Against You (Chapter8 Blog Post)

Sentry Python SDK Filtering

Sentry Data Scrubbing

Credits

Tom Wolters (Chapter8)

Affected versions

0.1.00.1.0rc10.1.0rc100.1.0rc110.1.0rc120.1.0rc130.1.0rc140.1.0rc150.1.0rc160.1.0rc20.1.0rc30.1.0rc4

+ 159 more Show less

0.1.0rc50.1.0rc60.1.0rc70.1.0rc80.1.0rc90.1.10.1.20.1.30.10.00.10.10.10.20.11.00.11.10.11.20.12.00.12.10.12.20.12.30.13.00.13.10.13.20.13.30.13.40.13.50.14.00.14.10.14.20.14.30.14.40.15.00.15.10.16.00.16.10.16.20.16.30.16.40.16.50.17.00.17.10.17.20.17.30.17.40.17.50.17.60.17.70.17.80.18.00.19.00.19.10.19.20.19.30.19.40.19.50.2.10.2.20.20.00.20.10.20.20.20.30.3.00.3.10.3.100.3.110.3.20.3.30.3.40.3.50.3.60.3.70.3.80.3.90.4.00.4.10.4.20.4.30.5.00.5.10.5.20.5.30.5.40.5.50.6.00.6.10.6.20.6.30.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.100.7.110.7.120.7.130.7.140.7.20.7.30.7.40.7.50.7.60.7.70.7.80.7.90.8.00.8.10.9.00.9.10.9.20.9.30.9.40.9.51.0.01.1.01.10.01.10.11.11.01.11.11.12.01.12.11.13.01.2.01.3.01.3.11.4.01.4.11.4.21.4.31.5.01.5.11.5.101.5.111.5.121.5.21.5.31.5.41.5.51.5.61.5.71.5.81.5.91.6.01.7.01.7.11.7.21.8.01.9.01.9.11.9.101.9.21.9.31.9.41.9.51.9.61.9.71.9.81.9.9

Fixed in

1.14.0

References

https://github.com/getsentry/sentry-python/security/advisories/GHSA-29pr-6jr8-q5jm
https://nvd.nist.gov/vuln/detail/CVE-2023-28117
https://github.com/getsentry/sentry-python/pull/1842
https://github.com/getsentry/sentry-python
https://github.com/getsentry/sentry-python/releases/tag/1.14.0
https://pypi.org/project/sentry-sdk

Updated Jul 07, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 2
minor 137
patch 169
pre 46

355 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More