In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.
CWE-79