Palletsprojects: >> Click >> 1.1 Security Vulnerabilities
This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below:
Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
CVSS Score
7.2
EPSS Score
0.009
Published
2026-04-30