VYPR

Opencanary

by Thinkst

Source repositories

CVEs (3)

  • CVE-2024-48911HigOct 14, 2024
    risk 0.44cvss 7.8epss 0.00

    OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change…

  • CVE-2026-85219LowSep 21, 2026
    risk 0.17cvss 3.7epss 0.00

    Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.

  • CVE-2026-16551MedJul 22, 2026
    risk 0.00cvss —epss 0.00

    Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only.