Vulnerabilities for click

First version without a known vulnerability: 8.3.3

Details

• PYSEC-2026-21322026-04-30

  Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

  Fixed in: 8.3.3