← Back

Click

click

Vendor: Palletsprojects • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-7246
1Palletsprojects
1Click
Jul 15, 2026
Apr 30, 2026
N/A· v4
7.2 HIGH· v3
N/A· v2
Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.