Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10215
  • PyPI/fast-dotenv
 Malicious code in fast-dotenv (PyPI) 6 days ago
  • No fix available
MAL-2026-6082
  • PyPI/dotenv-sync
 Malicious code in dotenv-sync (PyPI) 17 Jun
  • No fix available
GHSA-mf9w-mj56-hr94
  • PyPI/python-dotenv
 python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback 21 Apr
  • Fix available
  • Severity - 6.6 (Medium)
PYSEC-2026-2270
  • PyPI/python-dotenv
 See record for full details 20 Apr
  • Fix available
  • Severity - 6.6 (Medium)