Security update for python-python-dotenv

This update for python-python-dotenv fixes the following issue: CVE-2026-28684: follow symbolic links when rewriting .env files bsc1262423 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

SUSE-SU-2026:2724-1 Security update for python-python-dotenv

This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: follow symbolic links when rewriting .env files bsc1262423...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses pdfminersix-20251107-py3-none-any.whl, requests-2.32.5-py3-none-any.whl, langchaincore-0.3.81-py3-none-any.whl, pythondotenv-1.0.1-py3-none-any.whl, langchaintextsplitters-0.3.11-py3-none-any.whl, qs-6.15.1.tgz, idna-3.10-py3-none-any.whl, idna-3.14-py3-none-any.whl...

openSUSE 16 Security Update : python-python-dotenv (openSUSE-SU-2026:20952-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20952-1 advisory. This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, setkey and unsetkey in python-dotenv follow...

Security update for python-python-dotenv (moderate)

openSUSE security update: security update for python-python-dotenv ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20952-1 Rating: moderate References: bsc1262423 Cross-References: CVE-2026-28684 CVSS scores: CVE-2026-28684 SUSE : 6.6...

OPENSUSE-SU-2026:20952-1 Security update for python-python-dotenv

This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: Prior to version 1.2.2, setkey and unsetkey in python-dotenv follow symbolic links when rewriting .env files, allowing a local attacker to overwrite arbitrary files via a crafted symlink bsc1262423...

OESA-2026-2199 python-dotenv security update

Python-dotenv reads key-value pairs from a .env file and can set them as environment variables. It helps in the development of applications following the 12-factor principles. Security Fixes: python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to...

OESA-2026-2198 python-dotenv security update

Python-dotenv reads key-value pairs from a .env file and can set them as environment variables. It helps in the development of applications following the 12-factor principles. Security Fixes: python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to...

aiidalab-launch (>=2021.1001.0a0, <=2023.1019.0), config-env (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.1)

python-dotenv PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aiidalab-launch =2021.1001.0a0, =0.0.1, =1.1.1, =0.1.2, =0.1.2, =0.1.0, =0.8.0.dev6, =0.58.0, =0.1.0, =2.1.7, =1.0.0, =0.0.20, =0.1.0...

2m (1.2.5), accomate (>=1.0.4, <=2.0.0.6) +341 more potentially affected by CVE-2026-28684 via python-dotenv (0.20.0)

python-dotenv PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - 2m 1.2.5 - accomate =1.0.4, =0.0.1a0, =0.3.0, =0.4.0, =1.0.6, =0.3.1, =0.1.0, =1.0.4, =1.0.4, =1.0.9a0, =0.1.0, =0.2.0 and more Sourc...

tesserarius (>=0.0.2rc5, <=0.0.5) potentially affected by CVE-2026-28684 via python-dotenv (0.10.2)

python-dotenv PYPI version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - tesserarius =0.0.2rc5, =0.0.5 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

auto-timewatch (2.0.0), autodidaqt (1.1.0) +35 more potentially affected by CVE-2026-28684 via python-dotenv (0.10.5)

python-dotenv PYPI version 0.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - auto-timewatch 2.0.0 - autodidaqt 1.1.0 - bas-web-map-inventory =0.2.0, =0.1.0, =0.5.0, =0.4.2, =1.0.0, =0.1.6, =0.1.0, =1.0.2, =1.2....

promail (>=0.3.0, <=0.9.0) potentially affected by CVE-2026-28684 via python-dotenv (0.1.5)

python-dotenv PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - promail =0.3.0, =0.9.0 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

acru-l (>=1.0.0a0, <=1.0.0a6), akc-mamba (>=2.1.0a1, <=2.1.2a0) +182 more potentially affected by CVE-2026-28684 via python-dotenv (0.15.0)

python-dotenv PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - acru-l =1.0.0a0, =2.1.0a1, =1.0.0, =0.1.0, =1.4.0, =0.0.5, =0.6.2, =1.0.0, =0.1.1, =2021.10.11.4, =0.1.2, =0.1.8 and more Source cves...

abstract-python-email-validation (>=0.1.1, <=1.0.0), abstract-python-exchange-rates (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-28684 via python-dotenv (0.17.0)

python-dotenv PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.1.5, =0.0.3, =1.3.3, =1.0.1, =0.11.0, =0.0.3, =0.0.1, =0.3.0,...

enforcer (1.0.1), gpipe (>=0.0.1, <=0.0.10) +4 more potentially affected by CVE-2026-28684 via python-dotenv (0.7.1)

python-dotenv PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - enforcer 1.0.1 - gpipe =0.0.1, =0.4.37, =0.0.1, =0.0.39 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

ape-safe (>=0.6.0, <=0.7.1), async-web3 (>=0.1.0, <=0.3.1) +39 more potentially affected by CVE-2026-28684 via python-dotenv (0.16.0)

python-dotenv PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - ape-safe =0.6.0, =0.1.0, =0.0.1, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.7.2, =0.0.1, =0.4.0, =0.0.45, =0.0.1, =1.14.4, =0.5.11, =0.5.20 a...

SUSE CVE-2026-28684

python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, setkey and unsetkey in python-dotenv follow symbolic links when rewriting .env files, allowing a local attacker to overwrite arbitrary files via a crafted symlink when a...

abraia (>=0.7.1, <=0.9.2), cicdtest (>=0.0.0, <=0.93.0) +28 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.0)

python-dotenv PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abraia =0.7.1, =0.0.0, =0.1.18, =0.1.0, =1.3.5.1, =0.0.1, =0.0.1, =0.54.0, =2.0.0, =0.3.0, =0.0.15, =1.0.12 and more Source cves:...

abraia (>=0.9.3, <=0.11.0), aiocloudflare (>=0.1.2a0, <=0.2.1) +371 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.2)

python-dotenv PYPI version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abraia =0.9.3, =0.1.2a0, =0.1.0, =0.1.2, =0.0.1, =0.0.2, =0.3.2, =0.1.4, =0.1.0, =0.1.1, =0.0.2, =0.1.4, =22.0.0.dev28, =22.0.0.dev29...