E-mail HTML injection

PKSA-h8s8-nr9j-3cdp

Affected package: passbolt/passbolt_api

Affected version: <2.7.0

Reported by:
FriendsOfPHP/security-advisories