Skip to content
Threat Feed
Subscribe

Product

@Sentry/Nextjs (>= 11.0.0-Alpha.0, < 11.0.0-Rc.1)

1 brief RSS
critical advisory

Sentry-Javascript: Middleware bypass via tunnelRoute (CVE-2026-114139)

A middleware bypass vulnerability in the @sentry/nextjs SDK allows unauthenticated access to routes if the configured tunnel path overlaps with application routes in Webpack-based builds.

@sentry/nextjs +2 web-application middleware-bypass cve-2026-114139
1t 1c