CVE-2026-52794

Name of the Vulnerable Software and Affected Versions Sentry versions 24.4.0 through 26.5.1

Description A Regular Expression Denial of Service (ReDoS) exists in the event ingestion pipeline. This occurs when a regular expression is applied to attacker-controlled fields on incoming events, allowing the system to consume disproportionate CPU time. ReDoS is a type of attack where a complex regular expression is processed against a specifically crafted input string, causing the engine to take an exponential amount of time to complete the match.

Recommendations Update to version 26.5.2.