CVE-2026-7246

Опубликовано: 19 мая 2026

Источник: msrc

CVSS3: 7.2

EPSS Низкий

Описание

Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

EPSS

Процентиль: 56%

0.009

Низкий

7.2 High

CVSS3

Связанные уязвимости

CVE-2026-7246

CVSS3: 7.2

ubuntu

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CVE-2026-7246

CVSS3: 7.2

redhat

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CVE-2026-7246

CVSS3: 7.2

nvd

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CVE-2026-7246

CVSS3: 7.2

debian

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection v ...

openSUSE-SU-2026:21017-1

suse-cvrf

около 1 месяца назад

Security update for python-click

EPSS

Процентиль: 56%

0.009

Низкий

7.2 High

CVSS3