click-8.1.8-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.2) #452

Vulnerable Library - click-8.1.8-py3-none-any.whl

Composable command line interface toolkit

Library home page: https://files.pythonhosted.org/packages/7e/d4/7ebdbd03970677812aac39c869717059dbb71a4cfc033ca6e5221787892c/click-8.1.8-py3-none-any.whl

Sample Path to Dependency File: /log_viewer/.ws-temp-PGMCJU-requirements.txt

Path to vulnerable library: /log_viewer/.ws-temp-PGMCJU-requirements.txt,/modules/text/module_text_llm/.ws-temp-YBCMOS-requirements.txt

CVE-2026-7246

Vulnerable Library - click-8.1.8-py3-none-any.whl

Composable command line interface toolkit

Library home page: https://files.pythonhosted.org/packages/7e/d4/7ebdbd03970677812aac39c869717059dbb71a4cfc033ca6e5221787892c/click-8.1.8-py3-none-any.whl

Sample Path to Dependency File: /log_viewer/.ws-temp-PGMCJU-requirements.txt

Path to vulnerable library: /log_viewer/.ws-temp-PGMCJU-requirements.txt,/modules/text/module_text_llm/.ws-temp-YBCMOS-requirements.txt

Dependency Hierarchy:

• ❌ click-8.1.8-py3-none-any.whl (Vulnerable Library)

Found in base branch: develop

Vulnerability Details

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
Mend Note: The description of this vulnerability differs from MITRE.

Publish Date: 2026-04-30

URL: CVE-2026-7246

CVSS 3 Score Details (7.2)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: High
  • Privileges Required: High
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

Step up your Open Source Security Game with Mend here