CVE-2026-84164

The CodeChecker tool (specifically functions plist-to-html, parse --export html, and cmd diff --output html) is vulnerable to Stored XSS during static HTML report export. The root cause is that json.dumps fails to escape the less-than character (