cve 2024 40647

CVE-2024-40647 is a vulnerability in the Sentry Python SDK (sentry-sdk) that can cause environment variables to leak into child processes. Microsoft's MSRC advisory states that Azure Linux includes this open-source library and is therefore potentially affected. However, this does not mean only Azure Linux is at risk; the advisory lists Azure Linux as a confirmed carrier, but other systems using the affected SDK may also be vulnerable. Organizations using Azure Linux should treat it as in-scope and apply remediation steps to mitigate the risk of environment variable exposure.