Priority LOW 31
Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation.
Thinkst Applied Research
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Thinkst Applied Research records in CISA KEVNo Thinkst Applied Research vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-58544 CVE-2026-85220 · GHSA-x7vx-qh4q-fg6x
Denial-of-Service in the Thinkst Canary Redis service
Priority LOW 18
A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot.
Priority LOW 18
Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.
Priority LOW 11
An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat.
TI-2026-10234 CVE-2026-11859
HTML injection in the Canarytoken links email
Priority LOW 10
An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails.
TI-2026-11158 CVE-2026-13140
Stored Cross-Site Scripting in Canarytokens.org
Priority LOW 7
Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens.
TI-2026-09225 CVE-2026-10729
HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens
Priority LOW 7
An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS)…