MEDIUM6.6PyPI
GHSA-mf9w-mj56-hr94· CVE-2026-28684, PYSEC-2026-2270python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
Modified: 9/10/2026
package
pkg:pypi/python-dotenv
python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
Modified: 9/10/2026
Modified: 7/13/2026