CVE-2026-32722

Memray is a memory profiler for Python. Prior to Memray 1.19.2, Memray rendered the command line of the tracked process directly into generated HTML reports without escaping. Because there was no escaping, attacker-controlled command line arguments were inserted as raw HTML into the generated report. This allowed JavaScript execution when a victim opened the generated report in a browser. Version 1.19.2 fixes the issue.

• CWE-79

• https://github.com/bloomberg/memray/commit/ba6e4e2e9930f9641bed7adfdf43c8e2545ce249Patch
• https://github.com/bloomberg/memray/releases/tag/v1.19.2Product, Release Notes
• https://github.com/bloomberg/memray/security/advisories/GHSA-r5pr-887v-m2w9Exploit, Vendor Advisory

Published

Mar 18, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32717AnythingLLM is an application that turns pieces of content i…2.7
• CVE-2026-32718Coolify is an open-source and self-hostable tool for managin…6.5
• CVE-2026-32719AnythingLLM is an application that turns pieces of content i…6.4
• CVE-2026-3272A vulnerability was determined in Tenda F453 1.0.0.3. Affect…8.8
• CVE-2026-32720The CTFer.io Monitoring component is in charge of the collec…7.1
• CVE-2026-32721LuCI is the OpenWrt Configuration Interface. Versions prior …4.8
• CVE-2026-32723SandboxJS is a JavaScript sandboxing library. Prior to 0.8.3…4.7
• CVE-2026-32724PX4 autopilot is a flight control solution for drones. Prior…5.3
• CVE-2026-32725SciTokens C++ is a minimal library for creating and using Sc…8.3
• CVE-2026-32726SciTokens C++ is a minimal library for creating and using Sc…8.1
• CVE-2026-32727SciTokens is a reference library for generating and using Sc…6.5
• CVE-2026-32728Parse Server is an open source backend that can be deployed …7.6