Thinkst Applied Research Canarytokens

• CVE-2026-13140 Low 1.1 Stored Cross-Site Scripting in Canarytokens.org 0.3%
• CVE-2026-12888 Low 2.0 HTML injection in the Canarytoken Google Chat notification 0.4%
• CVE-2026-11859 Low 2.0 HTML injection in the Canarytoken links email 0.3%
• CVE-2026-10729 Low 1.2 HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens 0.2%