In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.Referenceshttps://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/