Our security and engineering teams have reviewed the advisories against the components that make up Sentry. Based on our assessment, as of October 21, 2026, we found that Sentry and our customers are not impacted by CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) and CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) nor by the compromised certificates related to the eMurdhra Certificate Authority.
We are continuing to monitor our environment and the details of the disclosures. We will take additional remediation actions if required. Should your Sentry data be impacted by a vulnerability or security incident, you will be contacted directly.
We handle all vulnerabilities in accordance with our Vulnerability Management Policy. This policy is outlined in our SOC2 Report & ISO 27001 Certificate, which can be accessed in product under Settings > Legal & Compliance: https://docs.sentry.io/security-legal-pii/security/soc2/
