1password-secrets (>=0.0.1.dev78, <=0.2.0), acidcli-zebra (4.14.0) +633 more potentially affected by CVE-2026-28684 via python-dotenv (0.21.1)

python-dotenv PYPI version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - 1password-secrets =0.0.1.dev78, =1.0.0, =0.0.1, =0.1.2, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =2.6.0, =0.3.0, =0.3.2 and mo...

aiidalab-launch (>=2021.1001.0a0, <=2023.1019.0), config-env (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.1)

python-dotenv PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aiidalab-launch =2021.1001.0a0, =0.0.1, =1.1.1, =0.1.2, =0.1.2, =0.1.0, =0.8.0.dev6, =0.58.0, =0.1.0, =2.1.7, =1.0.0, =0.0.20, =0.1.0...

abraia (>=0.9.3, <=0.11.0), aiocloudflare (>=0.1.2a0, <=0.2.1) +371 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.2)

python-dotenv PYPI version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abraia =0.9.3, =0.1.2a0, =0.1.0, =0.1.2, =0.0.1, =0.0.2, =0.3.2, =0.1.4, =0.1.0, =0.1.1, =0.0.2, =0.1.4, =22.0.0.dev28, =22.0.0.dev29...

1password-secrets (>=0.0.1.dev107, <=0.4.0), 42towels (>=0.1.1001, <=0.1.1011) +2378 more potentially affected by CVE-2026-28684 via python-dotenv (>=1.0.0, <=1.2.1)

python-dotenv PYPI version =1.0.0, =0.0.1.dev107, =0.1.1001, =2.3.0, =0.0.15, =0.15.1, =0.1.0, =0.1.0, =1.0.0, =2.3.9b1, =1.18.8, =0.1.0b0, =0.0.1, =0.0.0, =4.8.2, =4.8.399 and more Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

1password-secrets (>=0.0.1.dev107, <=0.4.0), 42towels (>=0.1.1001, <=0.1.1011) +2378 more potentially affected by CVE-2026-28684 via python-dotenv (>=1.0.0, <=1.2.1)

python-dotenv PYPI version =1.0.0, =0.0.1.dev107, =0.1.1001, =2.3.0, =0.0.15, =0.15.1, =0.1.0, =0.1.0, =1.0.0, =2.3.9b1, =1.18.8, =0.1.0b0, =0.0.1, =0.0.0, =4.8.2, =4.8.399 and more Source cves: CVE-2026-28684 Source advisory: GHSA-MF9W-MJ56-HR94...

abraia (>=0.7.1, <=0.9.2), cicdtest (>=0.0.0, <=0.93.0) +28 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.0)

python-dotenv PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abraia =0.7.1, =0.0.0, =0.1.18, =0.1.0, =1.3.5.1, =0.0.1, =0.0.1, =0.54.0, =2.0.0, =0.3.0, =0.0.15, =1.0.12 and more Source cves:...

argus-dynamixel (0.1.0), argus-rico (0.0.1) +44 more potentially affected by CVE-2026-28684 via python-dotenv (0.18.0)

python-dotenv PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - argus-dynamixel 0.1.0 - argus-rico 0.0.1 - bert-squeeze =0.1.0, =0.0.1, =0.0.1, =0.1.0, =2.0.0, =1.0.0, =1.3.0, =1.1.0, =1.0.0, =0.6....

aea (>=1.0.2, <=1.2.5), aea-cli-ipfs (>=1.0.0rc1, <=1.0.4) +92 more potentially affected by CVE-2026-28684 via python-dotenv (0.17.1)

python-dotenv PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aea =1.0.2, =1.0.0rc1, =1.0.0rc1, =1.0.0rc1, =1.0.0rc1, =1.0.9, =0.1.0, =0.1.3, =0.1.11 - bloomtechlib 0.0.1 - comon-crawler 0.9.8 -...

abstract-python-email-validation (>=0.1.1, <=1.0.0), abstract-python-exchange-rates (>=1.0.0, <=1.0.1) +21 more potentially affected by CVE-2026-28684 via python-dotenv (0.17.0)

python-dotenv PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.1.5, =0.0.3, =1.3.3, =1.0.1, =0.11.0, =0.0.3, =0.0.1, =0.3.0,...

ape-safe (>=0.6.0, <=0.7.1), async-web3 (>=0.1.0, <=0.3.1) +39 more potentially affected by CVE-2026-28684 via python-dotenv (0.16.0)

python-dotenv PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - ape-safe =0.6.0, =0.1.0, =0.0.1, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.7.2, =0.0.1, =0.4.0, =0.0.45, =0.0.1, =1.14.4, =0.5.11, =0.5.20 a...

acru-l (>=1.0.0a0, <=1.0.0a6), akc-mamba (>=2.1.0a1, <=2.1.2a0) +182 more potentially affected by CVE-2026-28684 via python-dotenv (0.15.0)

python-dotenv PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - acru-l =1.0.0a0, =2.1.0a1, =1.0.0, =0.1.0, =1.4.0, =0.0.5, =0.6.2, =1.0.0, =0.1.1, =2021.10.11.4, =0.1.2, =0.1.8 and more Source cves...

alcali (3003.1.0), am4894ga (>=0.0.1, <=0.0.6) +75 more potentially affected by CVE-2026-28684 via python-dotenv (0.14.0)

python-dotenv PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - alcali 3003.1.0 - am4894ga =0.0.1, =0.1.0, =0.0.0, =0.2.2, =1.7.3, =0.1.1, =0.1.1, =0.1.0, =0.1.39, =0.0.29, =0.0.33 and more Source...

2m (1.2.5), accomate (>=1.0.4, <=2.0.0.6) +341 more potentially affected by CVE-2026-28684 via python-dotenv (0.20.0)

python-dotenv PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - 2m 1.2.5 - accomate =1.0.4, =0.0.1a0, =0.3.0, =0.4.0, =1.0.6, =0.3.1, =0.1.0, =1.0.4, =1.0.4, =1.0.9a0, =0.1.0, =0.2.0 and more Sourc...

SUSE CVE-2026-28684

python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, setkey and unsetkey in python-dotenv follow symbolic links when rewriting .env files, allowing a local attacker to overwrite arbitrary files via a crafted symlink when a...

1password-secrets (>=0.0.1.dev107, <=0.4.0), 42towels (>=0.1.1001, <=0.1.1011) +2378 more potentially affected by CVE-2026-28684 via python-dotenv (>=1.0.0, <=1.2.1)

python-dotenv PYPI version =1.0.0, =0.0.1.dev107, =0.1.1001, =2.3.0, =0.0.15, =0.15.1, =0.1.0, =0.1.0, =1.0.0, =2.3.9b1, =1.18.8, =0.1.0b0, =0.0.1, =0.0.0, =4.8.2, =4.8.399 and more Source cves: CVE-2026-28684 Source advisory: SNYK:PYTHON-PYTHONDOTENV-16115271...

PYSEC-2026-2270

python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, setkey and unsetkey in python-dotenv follow symbolic links when rewriting .env files, allowing a local attacker to overwrite arbitrary files via a crafted symlink when a...

aiidalab-launch (>=2021.1001.0a0, <=2023.1019.0), config-env (>=0.0.1, <=0.0.4) +15 more potentially affected by CVE-2026-28684 via python-dotenv (0.19.1)

python-dotenv PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - aiidalab-launch =2021.1001.0a0, =0.0.1, =1.1.1, =0.1.2, =0.1.2, =0.1.0, =0.8.0.dev6, =0.58.0, =0.1.0, =2.1.7, =1.0.0, =0.0.20, =0.1.0...

oshino (>=0.1.8a1, <=0.3.0a4), windflow (>=0.1.0, <=0.1.14) potentially affected by CVE-2026-28684 via python-dotenv (0.6.0)

python-dotenv PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - oshino =0.1.8a1, =0.1.0, =0.1.14 Source cves: CVE-2026-28684 Source advisory: OSV:PYSEC-2026-2270...

boss-cli (>=1.0.0a18, <=1.0.3), lore (0.4.36) +1 more potentially affected by CVE-2026-28684 via python-dotenv (0.6.5)

python-dotenv PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - boss-cli =1.0.0a18, =0.1.16, =0.1.20 Source cves: CVE-2026-28684 Source advisory: OSV:PYSEC-2026-2270...

enforcer (1.0.1), gpipe (>=0.0.1, <=0.0.10) +4 more potentially affected by CVE-2026-28684 via python-dotenv (0.7.1)

python-dotenv PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - enforcer 1.0.1 - gpipe =0.0.1, =0.4.37, =0.0.1, =0.0.39 Source cves: CVE-2026-28684 Source advisory: OSV:PYSEC-2026-2270...