Skip to content
CVE PROGRAM SOURCE RECORD1.2 Low

CVE-2026-10729

HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ThinkstAppliedResearch

Description

An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails. This issue affects Canarytokens: from Docker tag sha-c42435e before sha-bfda4df, from Git commit c42435e before bfda4df.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Thinkst Applied Research Canarytokens

Default version status: unaffected

  • sha-c42435e to < sha-bfda4dfaffected
  • c42435e to < bfda4dfaffected

References