How to list Sentry SDK for Android public vulnerabilities?

[daudrain]

Hi,

The Security section of this repository doesn't list any security issues and searching for vulnerabilities in the National Vulnerabilities Database doesn't list any CVE related to Sentry SDK for Java/Android.

Only Python and next.js appear when searching with the following CPE code cpe:2.3:a:sentry:sentry_software_development_kit::::::::

And searching with cpe:2.3:a:sentry:sentry:::::::: lists vulnerability for the main sentry repository.

What would be the cpe code for Sentry SDK for Android?

Thank you

[markushi]

Hi @daudrain, thanks for reaching out!

As of now we haven't published any CVEs for the sentry-java SDK. We usually publish advisories on GitHub (sentry-java link here) and request a CVE if necessary.

As there are no advisories for sentry-java right now, here's an example how this looks like for our JS SDK.

[Harpoonthrower]

ok