Saurabh-kumar Python-dotenv — known CVE vulnerabilities

Every CVE whose affected-product data names Saurabh-kumar Python-dotenv, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-28684 — CVSS 6.6 (medium): python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and…