python-dotenv: python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback (moderate). GHSA-mf9w-mj56-hr94, CVE-2026-28684, PYSEC-2026-2270.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?