Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

python-dotenv

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1 · 1 medium
Registry
PyPI

Advisories 1

  • CVE-2026-28684Medium 6.6

    python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

    Affected: fixed in 1.2.2.