thinkst canarytokens

• CVE-2026-28355 Low 1.3 "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting 0.4%
• CVE-2024-41664 Medium 5.4 Blind SSRF via Canarytoken Webhook 0.4%
• CVE-2024-41663 Low 3.5 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting 0.3%
• CVE-2024-28111 Medium 6.5 CSV Injection in exported history CSV files 0.6%
• CVE-2023-22475 Medium 6.3 Cross-Site Scripting in Canarytoken history 0.6%
• CVE-2022-31113 Medium 6.3 Cross-Site Scripting in Canarytoken history 0.6%