CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Sentry-Javascript: Middleware Bypass when using Tunnel route

Published Oct 22, 2026 · updated Oct 22, 2026

What to do

  1. Upgrade to a fixed version: @sentry/nextjs 9.47.2, @sentry/nextjs 10.75.2, @sentry/nextjs 11.0.0-rc.1.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

@sentry/nextjs

>= 9.36.0, < 9.47.2
9.47.2

Check your project: npm ls @sentry/nextjs --all

Is @sentry/nextjs@9.47.2 safe to install? See the upgrade verdict →

@sentry/nextjs

>= 10.0.0-alpha.0, < 10.75.2
10.75.2

Check your project: npm ls @sentry/nextjs --all

Is @sentry/nextjs@10.75.2 safe to install? See the upgrade verdict →

@sentry/nextjs

>= 11.0.0-alpha.0, < 11.0.0-rc.1
11.0.0-rc.1

Check your project: npm ls @sentry/nextjs --all

Is @sentry/nextjs@11.0.0-rc.1 safe to install? See the upgrade verdict →

What changed

  1. Published in the GitHub Advisory Database as critical.

Sources

← All critical vulnerabilities