Thinkst Applied Research

6 CVEs in 2 Thinkst Applied Research products, including Canarytokens, Opencanary. Newest: CVE-2026-85219 (2026-09-21).

Thinkst Applied Research products with known CVEs

ProductCVEs
Canarytokens4
Opencanary2
Thinkst Applied Research CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-85219Low3.72026-09-21Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.
CVE-2026-165512026-07-22Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only.
CVE-2026-131402026-06-24Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a rando…
CVE-2026-128882026-06-22An HTML injection vulnerability exists in the Google Chat webhook notification  sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation…
CVE-2026-118592026-06-10An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting…
CVE-2026-107292026-06-03An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens…