Skip to contentThinkst Canarytokens vulnerabilities
- thinkst canarytokensStored Cross-Site Scripting in Canarytokens.orgCVE-2026-131401.1 Low
- thinkst canarytokensHTML injection in the Canarytoken Google Chat notificationCVE-2026-128882.0 Low
- thinkst canarytokensHTML injection in the Canarytoken links emailCVE-2026-118592.0 Low
- thinkst canarytokensHTML injection in the notification email for "Slow Redirect" and "Cloned Website" CanarytokensCVE-2026-107291.2 Low
- thinkst canarytokens"PWA" Canarytoken Vulnerable to Stored Self Cross-Site ScriptingCVE-2026-283551.3 Low
- thinkst canarytokensBlind SSRF via Canarytoken WebhookCVE-2024-416645.4 Medium
- thinkst canarytokensCanarytoken "Cloned Website" Vulnerable to Stored Cross-Site ScriptingCVE-2024-416633.5 Low
- thinkst canarytokensCSV Injection in exported history CSV filesCVE-2024-281116.5 Medium
- thinkst canarytokensCross-Site Scripting in Canarytoken historyCVE-2023-224756.3 Medium
- thinkst canarytokensCross-Site Scripting in Canarytoken historyCVE-2022-311136.3 Medium
- thinkst canarytokensThinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size...CVE-2019-9768Public exploitEPSS 11.7%7.5 High