pallets/click

pallets/click

GitHubGitHub
GitHubgithub.com
click.palletsprojects.comclick.palletsprojects.com
Releases69
Frequency2 months 3 days
Last Release
Stars17.5K
Python composable command line interface toolkit
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-7246↗
7.2 HIGH—

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.