All products

python-dotenv

PyPI · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallbackCVE-2026-28684 · GHSA-MF9W-MJ56-HR94Version ranges need review. python-dotenvLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 PyPIRed Hat Medium Fix reported