CVE-2026-10729CWE-74

HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens

Low · published June 3, 2026

CVSS v4.0
1.2
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails.

This issue affects Canarytokens: from Docker tag sha-c42435e before sha-bfda4df, from Git commit c42435e before bfda4df.

The record
Technical detail
CVSS v4.0
1.2 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:P/AU:N/RE:L/U:Green
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2026-06-03T13:02Z
EPSS history
Timeline
  • 03 JUN 13:02Z
    HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens
    cvelistv5