[{"data":1,"prerenderedAt":393},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-python-dotenv-27b12285":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":254,"related":336},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":85,"occurrenceCount":41,"directRepositoryCount":38,"versionCount":86,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":32,"verifiedAttestation":91,"repositories":92,"versions":171},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","pypi","python-dotenv",null,12,5,[88],"BSD-3-Clause",[90],"GHSA-mf9w-mj56-hr94",true,[93,101,108,115,122,128,134,141,147,153,159,165],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":98,"evidenceCount":100},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[99],"1.2.2",3,{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":106,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[107],"1.0.1",{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":113,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[114],"1.2.1",{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":120,"evidenceCount":32},"opencode:6174","opencode-6174","Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend",[121],"1.1.0",{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":127,"evidenceCount":32},"opencode:3608","opencode-3608","AI","iqsh\u002Fcollaboration-online-board\u002Fai",[107],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[114],{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":139,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[140],"1.1.1",{"id":142,"slug":143,"name":144,"pathWithNamespace":145,"versions":146,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[140],{"id":148,"slug":149,"name":150,"pathWithNamespace":151,"versions":152,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[121],{"id":154,"slug":155,"name":156,"pathWithNamespace":157,"versions":158,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[107],{"id":160,"slug":161,"name":162,"pathWithNamespace":163,"versions":164,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[114],{"id":166,"slug":167,"name":168,"pathWithNamespace":169,"versions":170,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[114],[172,192,205,217,237],{"version":107,"repositoryCount":100,"occurrenceCount":100,"ageDays":173,"advisoryIds":174,"metadata":175},909,[90],{"state":176,"checkedAt":177,"publishedAt":178,"deprecated":46,"deprecatedReason":84,"licenses":179,"advisoryIds":180,"links":182,"relatedProjects":186,"attestations":190,"verifiedAttestation":46,"projectStatus":191},"resolved","2026-07-20T03:19:50.101Z","2024-01-23T06:32:58Z",[88],[90,181],"PYSEC-2026-2270",[183],{"label":184,"url":185},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",[187],{"id":188,"relationType":184,"relationProvenance":189},"github.com\u002Ftheskumar\u002Fpython-dotenv","UNVERIFIED_METADATA",[],"active",{"version":121,"repositoryCount":193,"occurrenceCount":193,"ageDays":194,"advisoryIds":195,"metadata":196},2,482,[90],{"state":176,"checkedAt":177,"publishedAt":197,"deprecated":46,"deprecatedReason":84,"licenses":198,"advisoryIds":199,"links":200,"relatedProjects":202,"attestations":204,"verifiedAttestation":46,"projectStatus":191},"2025-03-25T10:14:55Z",[88],[90,181],[201],{"label":184,"url":185},[203],{"id":188,"relationType":184,"relationProvenance":189},[],{"version":140,"repositoryCount":193,"occurrenceCount":193,"ageDays":206,"advisoryIds":207,"metadata":208},391,[90],{"state":176,"checkedAt":177,"publishedAt":209,"deprecated":46,"deprecatedReason":84,"licenses":210,"advisoryIds":211,"links":212,"relatedProjects":214,"attestations":216,"verifiedAttestation":46,"projectStatus":191},"2025-06-24T04:21:06Z",[88],[90,181],[213],{"label":184,"url":185},[215],{"id":188,"relationType":184,"relationProvenance":189},[],{"version":114,"repositoryCount":34,"occurrenceCount":34,"ageDays":218,"advisoryIds":219,"metadata":220},266,[90],{"state":176,"checkedAt":177,"publishedAt":221,"deprecated":46,"deprecatedReason":84,"licenses":222,"advisoryIds":223,"links":224,"relatedProjects":229,"attestations":233,"verifiedAttestation":91,"projectStatus":191},"2025-10-26T15:12:09Z",[88],[90,181],[225,226],{"label":184,"url":185},{"label":227,"url":228},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-dotenv\u002F1.2.1\u002Fpython_dotenv-1.2.1-py3-none-any.whl\u002Fprovenance",[230,231],{"id":188,"relationType":184,"relationProvenance":189},{"id":188,"relationType":184,"relationProvenance":232},"PYPI_PUBLISH_ATTESTATION",[234],{"type":235,"url":228,"verified":91,"sourceRepository":185,"commit":236},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","eaf2a9129ccec6febda0f741eb3bb852c3f947bd",{"version":99,"repositoryCount":32,"occurrenceCount":100,"ageDays":238,"advisoryIds":239,"metadata":240},140,[],{"state":176,"checkedAt":177,"publishedAt":241,"deprecated":46,"deprecatedReason":84,"licenses":242,"advisoryIds":243,"links":244,"relatedProjects":248,"attestations":251,"verifiedAttestation":91,"projectStatus":191},"2026-03-01T16:00:25Z",[88],[],[245,246],{"label":184,"url":185},{"label":227,"url":247},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-dotenv\u002F1.2.2\u002Fpython_dotenv-1.2.2-py3-none-any.whl\u002Fprovenance",[249,250],{"id":188,"relationType":184,"relationProvenance":189},{"id":188,"relationType":184,"relationProvenance":232},[252],{"type":235,"url":247,"verified":91,"sourceRepository":185,"commit":253},"36004e0e34be7665ff2b11a8a4005144f76f176d",{"occurrences":255,"occurrenceCount":41},[256,264,271,276,283,289,294,299,304,311,316,321,326,331],{"id":257,"repositoryId":123,"repositorySlug":124,"repositoryName":125,"repositoryPathWithNamespace":126,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":258,"direct":84,"development":84,"sourceKind":259,"filePath":260,"blobSha":261,"sourceUrl":262,"commitSha":263},"component:da8b16da0d34363196754117","pypi:python-dotenv@1.0.1","spdx-yaml","SPDX_v2.0.0.yml","e9e46566a2217346214d08f9dede99d8821b3c68","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fblob\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327\u002FSPDX_v2.0.0.yml","7cc4cbe5064bc5ede2426caf6981c5e9d0509327",{"id":265,"repositoryId":109,"repositorySlug":110,"repositoryName":111,"repositoryPathWithNamespace":112,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":266,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":268,"sourceUrl":269,"commitSha":270},"component:85b4bb8a5edfe4d74770976e","pypi:python-dotenv@1.2.1","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":272,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":266,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:57d5264095482389eb492c81","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":277,"repositoryId":116,"repositorySlug":117,"repositoryName":118,"repositoryPathWithNamespace":119,"ecosystem":82,"name":83,"identity":81,"version":121,"versionKey":278,"direct":84,"development":46,"sourceKind":279,"filePath":56,"blobSha":280,"sourceUrl":281,"commitSha":282},"component:3d33699a6c762eb6e6031b55","pypi:python-dotenv@1.1.0","poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","fc7e24cd546449ac9fdee4ad78aab861e0c89666",{"id":284,"repositoryId":135,"repositorySlug":136,"repositoryName":137,"repositoryPathWithNamespace":138,"ecosystem":82,"name":83,"identity":81,"version":140,"versionKey":285,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":286,"sourceUrl":287,"commitSha":288},"component:80ce08deb9e0bb8d28749a30","pypi:python-dotenv@1.1.1","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":290,"repositoryId":102,"repositorySlug":103,"repositoryName":104,"repositoryPathWithNamespace":105,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":258,"direct":84,"development":46,"sourceKind":279,"filePath":56,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:5df79df226a63fcc63f9eefd","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":295,"repositoryId":142,"repositorySlug":143,"repositoryName":144,"repositoryPathWithNamespace":145,"ecosystem":82,"name":83,"identity":81,"version":140,"versionKey":285,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":296,"sourceUrl":297,"commitSha":298},"component:b93a676f882a03ccbc92604c","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":300,"repositoryId":148,"repositorySlug":149,"repositoryName":150,"repositoryPathWithNamespace":151,"ecosystem":82,"name":83,"identity":81,"version":121,"versionKey":278,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":301,"sourceUrl":302,"commitSha":303},"component:4d6d5e9bf9d12e321fdcb350","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":305,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":306,"direct":84,"development":84,"sourceKind":267,"filePath":307,"blobSha":308,"sourceUrl":309,"commitSha":310},"component:36f530825c91fd14ab66bfd4","pypi:python-dotenv@1.2.2","mucgpt-assistant-service-migrations\u002Fuv.lock","3a5359c8b1106f9e3c8ced27e857ac50de3faef1","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-assistant-service-migrations\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"id":312,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":306,"direct":84,"development":84,"sourceKind":267,"filePath":313,"blobSha":314,"sourceUrl":315,"commitSha":310},"component:c93c5f3d750722741bb6d044","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-assistant-service\u002Fuv.lock",{"id":317,"repositoryId":94,"repositorySlug":95,"repositoryName":96,"repositoryPathWithNamespace":97,"ecosystem":82,"name":83,"identity":81,"version":99,"versionKey":306,"direct":84,"development":84,"sourceKind":267,"filePath":318,"blobSha":319,"sourceUrl":320,"commitSha":310},"component:0a9ed2bc1116a6599fb9d757","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock",{"id":322,"repositoryId":154,"repositorySlug":155,"repositoryName":156,"repositoryPathWithNamespace":157,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":258,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":323,"sourceUrl":324,"commitSha":325},"component:5b09bc0db8900fe049fceefa","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":327,"repositoryId":160,"repositorySlug":161,"repositoryName":162,"repositoryPathWithNamespace":163,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":266,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":328,"sourceUrl":329,"commitSha":330},"component:951c36fceba098203a02550a","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":332,"repositoryId":166,"repositorySlug":167,"repositoryName":168,"repositoryPathWithNamespace":169,"ecosystem":82,"name":83,"identity":81,"version":114,"versionKey":266,"direct":84,"development":84,"sourceKind":267,"filePath":55,"blobSha":333,"sourceUrl":334,"commitSha":335},"component:578799d87de7bbb6ff4c8c40","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"repositories":337,"vulnerabilities":362},[338,340,342,344,346,348,350,352,354,356,358,360],{"id":94,"slug":95,"name":96,"pathWithNamespace":97,"versions":339,"evidenceCount":100},[99],{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":341,"evidenceCount":32},[107],{"id":109,"slug":110,"name":111,"pathWithNamespace":112,"versions":343,"evidenceCount":32},[114],{"id":116,"slug":117,"name":118,"pathWithNamespace":119,"versions":345,"evidenceCount":32},[121],{"id":123,"slug":124,"name":125,"pathWithNamespace":126,"versions":347,"evidenceCount":32},[107],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":349,"evidenceCount":32},[114],{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":351,"evidenceCount":32},[140],{"id":142,"slug":143,"name":144,"pathWithNamespace":145,"versions":353,"evidenceCount":32},[140],{"id":148,"slug":149,"name":150,"pathWithNamespace":151,"versions":355,"evidenceCount":32},[121],{"id":154,"slug":155,"name":156,"pathWithNamespace":157,"versions":357,"evidenceCount":32},[107],{"id":160,"slug":161,"name":162,"pathWithNamespace":163,"versions":359,"evidenceCount":32},[114],{"id":166,"slug":167,"name":168,"pathWithNamespace":169,"versions":361,"evidenceCount":32},[114],[363],{"id":90,"slug":364,"dossier":46,"summary":365,"aliases":366,"sourceIds":368,"published":369,"modified":370,"checkedAt":7,"severity":371,"references":375,"versionKeys":391,"packageCount":32,"repositoryCount":392},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[367,181],"CVE-2026-28684",[90,181],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[372],{"type":373,"score":374},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[376,379,382,384,387,389],{"type":377,"url":378},"FIX","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":380,"url":381},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":377,"url":383},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":385,"url":386},"WEB","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":388,"url":185},"PACKAGE",{"type":380,"url":390},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[258,278,285,266],11,1784558563407]