Thinkst vulnerabilities

Products

• Canarytokens 11
• Opencanary 3

Newest

• thinkst opencanary Denial-of-Service in the OpenCanary Redis service CVE-2026-85219 3.7 LowSeptember 21, 2026
• thinkst opencanary Denial-of-Service in OpenCanary's MongoDB module CVE-2026-16551 6.9 MediumJuly 22, 2026
• thinkst canarytokens Stored Cross-Site Scripting in Canarytokens.org CVE-2026-13140 1.1 LowJune 24, 2026
• thinkst canarytokens HTML injection in the Canarytoken Google Chat notification CVE-2026-12888 2.0 LowJune 22, 2026
• thinkst canarytokens HTML injection in the Canarytoken links email CVE-2026-11859 2.0 LowJune 10, 2026
• thinkst canarytokens HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens CVE-2026-10729 1.2 LowJune 3, 2026
• thinkst canarytokens "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting CVE-2026-28355 1.3 LowFebruary 27, 2026
• thinkst opencanary OpenCanary Executes Commands From Potentially Writable Config File CVE-2024-48911 Fix available 5.8 MediumOctober 14, 2024
• thinkst canarytokens Blind SSRF via Canarytoken Webhook CVE-2024-41664 5.4 MediumJuly 23, 2024
• thinkst canarytokens Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting CVE-2024-41663 3.5 LowJuly 23, 2024
• thinkst canarytokens CSV Injection in exported history CSV files CVE-2024-28111 6.5 MediumMarch 6, 2024
• thinkst canarytokens Cross-Site Scripting in Canarytoken history CVE-2023-22475 6.3 MediumJanuary 6, 2023
• thinkst canarytokens Cross-Site Scripting in Canarytoken history CVE-2022-31113 6.3 MediumJuly 1, 2022
• thinkst canarytokens Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size... CVE-2019-9768 Public exploit EPSS 11.7% 7.5 HighMarch 14, 2019