https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:04:16.246188+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-7246 CVE-2026-7246 — [DISPUTED] Pallets Click contains a command injection via Unsanitized Filename "click.edit()" 2026-09-28T19:04:17.024776+00:00

Affected: Pallets Click Click, Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below:

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

 https://vulnerability.circl.lu/vuln/pysec-2026-2132 PYSEC-2026-2132 2026-09-28T19:04:17.024934+00:00

Affected: PyPI: click

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.