https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:30:21.713482+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-13140 CVE-2026-13140 — Stored Cross-Site Scripting in Canarytokens.org 2026-10-09T00:30:21.735805+00:00

Affected: Thinkst Applied Research Canarytokens

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens.

Anonymous exploitation requires knowledge of a random identifier.

This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e.