What’s Vulnerable › Products

thinkst canarytokens vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your thinkst canarytokens version is affected

Latest thinkst canarytokens vulnerabilities

• CVE-2026-28355 — "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting (CVSS 1.3)
• CVE-2024-41664 — Blind SSRF via Canarytoken Webhook (CVSS 5.4)
• CVE-2024-41663 — Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting (CVSS 3.5)
• CVE-2024-28111 — CSV Injection in exported history CSV files (CVSS 6.5)
• CVE-2023-22475 — Cross-Site Scripting in Canarytoken history (CVSS 6.1)
• CVE-2022-31113 — Cross-Site Scripting in Canarytoken history (CVSS 6.1)
• CVE-2019-9768 — (CVSS 7.5)