CVE-2026-85219

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-85219 Denial-of-Service in the OpenCanary Redis service

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-85219

CVE-2026-85219 is a Denial-of-Service vulnerability in the Redis module of Thinkst Canary's OpenCanary 0.9.9 . An unauthenticated remote attacker can trigger unconstrained memory usage , leading to service degradation. The CVSS 3.1 score is 3.7 (Low) , reflecting a network attack vector with high...

opencanary

OpenCanary от Thinkst Canary OpenCanary — это многопротокольный сетевой хонейпот. Его основное применение — ловить хакеров после того, как они проникли в непубличные сети. Он предъявляет крайне низкие требования к ресурсам и может быть настроен, модифицирован и расширен. Обзор OpenCanary работает...

CVE-2026-16551

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

CVE-2026-16551

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

EUVD-2026-47648

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

CVE-2026-16551 Denial-of-Service in OpenCanary's MongoDB module

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

CVE-2026-16551 Denial-of-Service in OpenCanary's MongoDB module

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

PT-2026-63338

Denial-of-Service in Thinkst Applied Research OpenCanary MongoDB module allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only...

EUVD-2024-3096

Malicious code in bioql PyPI...

CVE-2024-48911

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

Privilege Escalation

OpenCanary is vulnerable to Privilege Escalation. The vulnerability is due to the config file being stored in an unprivileged user directory, allowing an unprivileged user to modify it and escalate permissions when the root user later runs the daemon...

GHSA-PF5V-PQFV-X8JJ OpenCanary Executes Commands From Potentially Writable Config File

Impact OpenCanary directly executed commands taken from its config file. Where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon...

Incorrect Authorization

Overview opencanary is an OpenCanary daemon Affected versions of this package are vulnerable to Incorrect Authorization through the configuration file. An attacker can escalate privileges by modifying the configuration file, which is executed by the daemon running as root. Remediation Upgrade...

OpenCanary Executes Commands From Potentially Writable Config File

Impact OpenCanary directly executed commands taken from its config file. Where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon...

CVE-2024-48911

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

PYSEC-2024-248

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

PYSEC-2024-248

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and...

CVE-2024-48911

CVE-2024-48911 affects OpenCanary. Before 0.9.4, the config file could be edited by an unprivileged user in an unprivileged directory while the daemon runs as root, allowing that user to influence commands executed later by root and escalate privileges. The issue is fixed in OpenCanary 0.9.4 and ...