Codesupplyco Canvas vulnerabilities

• codesupplyco canvas Canvas <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Block Attribute CVE-2026-9629 6.4 MediumJune 13, 2026