CVE-2026-7246 Pallets Click contains a command injection via Unsanitized Filename "click.edit()" Information published. EPSS 0.01 CVE-2026-7246 Pallets US Microsoft Security · 17. 5. 10:01