Threats affecting pkg:pypi/click

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.9%	CVE-2026-7246Click · Command Injection High7.2EPSS 0.9%2026-04-30CVE Database V5CVE-2026-7246 This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account. EPSS 0.9%Vulnerability Pallets Click CWE-77	CVE Database V5	2026-04-30

Page 1 of 1 · 1 duplicate CVE record merged