CVE-2026-114139npm @sentry/nextjs

Not on CISA's list of exploited flaws, and not in the news we track.

Chance of exploitation in 30 daysEPSS

0.51%

0%Higher than 43% of all CVEs

Reading the vendor advisory

Fix it in one click

Fix it in your code

Explain it to me

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-114139. Nothing runs until you send it.

Sentry-Javascript: Middleware Bypass when using Tunnel route

Not on CISA's list of exploited flaws, and not in the news we track.

Chance of exploitation in 30 daysEPSS

0.51%

0%Higher than 43% of all CVEs

You are affected if

Next.js apps using @sentry/nextjs with tunnelRoute set, webpack builds, and middleware-only authorization

The fix

Upgrade to @sentry/nextjs 9.47.2, 10.75.2, or 11.0.0-rc.1; or avoid collisions

Reading the vendor advisory

Fix it in your code

Explain it to me

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-114139. Nothing runs until you send it.

Sentry-Javascript: Middleware Bypass when using Tunnel route