CVE-2026-32722

CVE-2026-32722 concerns Bloomberg’s Memray Python memory profiler prior to v1.19.2, where the command line of the tracked process was rendered directly into generated HTML reports without escaping. This allowed attacker-controlled command-line metadata to be inserted as raw HTML, enabling JavaScr...