a7a1234 (1.0.0), ai-jarvis (>=0.0.2, <=0.0.3) +107 more potentially affected by CVE-2026-28684 via python-dotenv (0.21.0)

python-dotenv PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - a7a1234 1.0.0 - ai-jarvis =0.0.2, =0.1.0, =0.0.2, =0.0.2, =0.0.3, =1.0.0, =0.6.3, =0.1.4, =0.1.21, =0.0.1, =1.0.2, =1.0.0, =1.0.1 and...

agavepy (>=1.0.0a4, <=1.0.0a5), aitoai (>=0.1.2, <=0.2.1) +6 more potentially affected by CVE-2026-28684 via python-dotenv (0.11.0)

python-dotenv PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - agavepy =1.0.0a4, =0.1.2, =0.1.0rc4, =0.1.1, =0.1.2 - simple-grid-yaml-compiler 1.0.6 Source cves: CVE-2026-28684 Source advisory:...

aima (2023.2.4), air-kit (>=0.1.1, <=0.1.9) +65 more potentially affected by CVE-2026-28684 via python-dotenv (0.13.0)

python-dotenv PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aima 2023.2.4 - air-kit =0.1.1, =0.1.10, =0.0.1, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.6, =0.1.0, =0.2.0, =0.21.8, =0.26.1 and...

adqol-persist (0.0.4), alcali (>=2019.2.5, <=3000.1.0) +23 more potentially affected by CVE-2026-28684 via python-dotenv (0.12.0)

python-dotenv PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - adqol-persist 0.0.4 - alcali =2019.2.5, =1.5.0, =0.0.2, =0.1.0, =3.0.0, =0.4.2.14, =2.7.0, =1.0.0b2, =1.1.0, =3.2.0, =3.3.1 and more...

enforcer (1.0.1), gpipe (>=0.0.1, <=0.0.10) +4 more potentially affected by CVE-2026-28684 via python-dotenv (0.7.1)

python-dotenv PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - enforcer 1.0.1 - gpipe =0.0.1, =0.4.37, =0.0.1, =0.0.39 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

dhitools (>=0.0.1, <=0.0.3), elastic-logger (>=1.0.0, <=1.0.7) +7 more potentially affected by CVE-2026-28684 via python-dotenv (0.8.2)

python-dotenv PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - dhitools =0.0.1, =1.0.0, =1.0.3, =0.0.6, =0.1.1.dev0, =0.8.2, =0.2.7, =0.0.1, =0.0.2 Source cves: CVE-2026-28684 Source advisory:...

auto-timewatch (2.0.0), autodidaqt (1.1.0) +35 more potentially affected by CVE-2026-28684 via python-dotenv (0.10.5)

python-dotenv PYPI version 0.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - auto-timewatch 2.0.0 - autodidaqt 1.1.0 - bas-web-map-inventory =0.2.0, =0.1.0, =0.5.0, =0.4.2, =1.0.0, =0.1.6, =0.1.0, =1.0.2, =1.2....

lantern-flask (>=0.0.24, <=0.0.47), tgbotgen (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-28684 via python-dotenv (0.9.0)

python-dotenv PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - lantern-flask =0.0.24, =0.1.0, =0.2.1 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

agogosml (>=0.1.1, <=0.1.2), betterlifepsi (>=0.6.7.post3, <=0.6.8) +16 more potentially affected by CVE-2026-28684 via python-dotenv (0.9.1)

python-dotenv PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - agogosml =0.1.1, =0.6.7.post3, =0.1.0, =0.1.0, =0.1.0, =2019.2.3rc0, =0.0.0, =2.1.0, =1.1.0, =0.6.3, =0.0.2, =0.0.16 and more Source...

pydrag (18.1.0), pytuber (19.1.0) +1 more potentially affected by CVE-2026-28684 via python-dotenv (0.10.0)

python-dotenv PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - pydrag 18.1.0 - pytuber 19.1.0 - uploadgram =0.2.1, =0.3.4 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

ezissue (0.1.0), geli-python-common (2.0.0) +8 more potentially affected by CVE-2026-28684 via python-dotenv (0.10.1)

python-dotenv PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - ezissue 0.1.0 - geli-python-common 2.0.0 - lightnovel-crawler =2.7.1, =0.1.3, =0.1.0, =0.1.2, =0.0.1.dev75, =0.3.3, =0.3.71 Source...

tesserarius (>=0.0.2rc5, <=0.0.5) potentially affected by CVE-2026-28684 via python-dotenv (0.10.2)

python-dotenv PYPI version 0.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - tesserarius =0.0.2rc5, =0.0.5 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

aicsapi-tool-python (>=0.2.4, <=0.3.2), akc-mamba (>=2.0.1, <=2.0.2) +42 more potentially affected by CVE-2026-28684 via python-dotenv (0.10.3)

python-dotenv PYPI version 0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aicsapi-tool-python =0.2.4, =2.0.1, =2018.3.1, =1.0.0, =1.2.1, =0.1.0, =0.22.11, =0.9.7, =0.0.2, =0.0.2, =1.0.0, =0.0.7, =1.1.0 -...

ew-der-modbus-sim-py (0.1.0a7) potentially affected by CVE-2026-28684 via python-dotenv (0.1.0)

python-dotenv PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - ew-der-modbus-sim-py 0.1.0a7 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

promail (>=0.3.0, <=0.9.0) potentially affected by CVE-2026-28684 via python-dotenv (0.1.5)

python-dotenv PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - promail =0.3.0, =0.9.0 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

attendant (>=0.1.1, <=0.1.2), dimet (0.1.0) +1 more potentially affected by CVE-2026-28684 via python-dotenv (0.5.1)

python-dotenv PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - attendant =0.1.1, =4.0.0, =4.1.3 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

eac-toolbelt (>=1.0.0, <=2.5.5) potentially affected by CVE-2026-28684 via python-dotenv (0.6.3)

python-dotenv PYPI version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - eac-toolbelt =1.0.0, =2.5.5 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

postmail (>=0.1.0, <=0.3.0) potentially affected by CVE-2026-28684 via python-dotenv (0.6.4)

python-dotenv PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - postmail =0.1.0, =0.3.0 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

1password-secrets (>=0.0.1.dev78, <=0.2.0), acidcli-zebra (4.14.0) +633 more potentially affected by CVE-2026-28684 via python-dotenv (0.21.1)

python-dotenv PYPI version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - 1password-secrets =0.0.1.dev78, =1.0.0, =0.0.1, =0.1.2, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =2.6.0, =0.3.0, =0.3.2 and mo...

aiidalab-launch (>=2021.1001.0a0, <=2023.1019.0), config-env (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.1)

python-dotenv PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aiidalab-launch =2021.1001.0a0, =0.0.1, =1.1.1, =0.1.2, =0.1.2, =0.1.0, =0.8.0.dev6, =0.58.0, =0.1.0, =2.1.7, =1.0.0, =0.0.20, =0.1.0...