Thinkst Applied Research

5 CVEs across 2 Thinkst Applied Research products. Browse Thinkst Applied Research vulnerabilities, severities, and proof-of-concept exploits.

Thinkst Applied Research products with known CVEs

ProductCVEs
Canarytokens4
Opencanary1
Thinkst Applied Research CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-165512026-07-22Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only.
CVE-2026-131402026-06-24Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a rando…
CVE-2026-128882026-06-22An HTML injection vulnerability exists in the Google Chat webhook notification  sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation…
CVE-2026-118592026-06-10An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting…
CVE-2026-107292026-06-03An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens…