What’s Vulnerable › Products

Thinkst Applied Research Canarytokens vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Thinkst Applied Research Canarytokens version is affected

Latest Thinkst Applied Research Canarytokens vulnerabilities

• CVE-2026-13140 — Stored Cross-Site Scripting in Canarytokens.org (CVSS 1.1)
• CVE-2026-12888 — HTML injection in the Canarytoken Google Chat notification (CVSS 2.0)
• CVE-2026-11859 — HTML injection in the Canarytoken links email (CVSS 2.0)
• CVE-2026-10729 — HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens (CVSS 1.2)