@sentry/nextjs
Official Sentry SDK for Next.js
78%
Total Score
healthy
Strong release cadence and active organizational maintenance outweigh workflow permission and action-pinning concerns.
Health Score Breakdown
All 27 workflows were analyzed with no untrusted checkouts or script-injection findings, but 145 of 164 action references are unpinned and several workflows grant broad app-token permissions. High-confidence github-app findings and the wide pinning gap lower workflow hygiene, while low-confidence cache findings and ordinary pull_request_target triggers are not decisive alone.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2023-46729 @sentry/nextjs is vulnerable to Server-Side Request Forgery (SSRF) in versions 7.26.0 - 7.77.0. | 7.26.0 - 7.77.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rollup Version ^4.60.3 | — | — |
@sentry/core Version 11.6.0 | — | — |
@sentry/node Version 11.6.0 | — | — |
@sentry/react Version 11.6.0 | — | — |
stacktrace-parser Version ^0.1.11 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 5 years ago
- Unpacked Size
- 2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.