VYPR
← All advisories
Low severityNVD Advisory· Published Jun 3, 2026· Updated Jun 4, 2026

CVE-2026-10729

CVE-2026-10729

Description

An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails.

This issue affects Canarytokens: from Docker tag sha-c42435e before sha-bfda4df, from Git commit c42435e before bfda4df.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Thinkst/Canarytokensllm-fuzzy
    Range: from sha-c42435e before sha-bfda4df, from commit c42435e before bfda4df

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.