[{"data":1,"prerenderedAt":405},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-python-dotenv-27b12285":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":259,"related":346},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":81,"category":82,"aiRelevant":45,"provider":82,"repositoryCount":83,"occurrenceCount":84,"directRepositoryCount":37,"versionCount":85,"licenseExpressions":86,"advisoryIds":88,"advisoryCount":32,"verifiedAttestation":90,"repositories":91,"versions":176},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","pypi","python-dotenv",null,13,15,5,[87],"BSD-3-Clause",[89],"GHSA-mf9w-mj56-hr94",true,[92,100,107,114,121,127,133,139,146,152,158,164,170],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":97,"evidenceCount":99},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[98],"1.2.2",3,{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":105,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[106],"1.0.1",{"id":108,"slug":109,"name":110,"pathWithNamespace":111,"versions":112,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[113],"1.2.1",{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":119,"evidenceCount":32},"opencode:6174","opencode-6174","Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend",[120],"1.1.0",{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":32},"opencode:3608","opencode-3608","AI","iqsh\u002Fcollaboration-online-board\u002Fai",[106],{"id":128,"slug":129,"name":130,"pathWithNamespace":131,"versions":132,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[98],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[113],{"id":140,"slug":141,"name":142,"pathWithNamespace":143,"versions":144,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[145],"1.1.1",{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":151,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[145],{"id":153,"slug":154,"name":155,"pathWithNamespace":156,"versions":157,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[120],{"id":159,"slug":160,"name":161,"pathWithNamespace":162,"versions":163,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[106],{"id":165,"slug":166,"name":167,"pathWithNamespace":168,"versions":169,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[113],{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":175,"evidenceCount":32},"opencode:7811","opencode-7811","Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation",[113],[177,197,210,222,242],{"version":106,"repositoryCount":99,"occurrenceCount":99,"ageDays":178,"advisoryIds":179,"metadata":180},932,[89],{"state":181,"checkedAt":182,"publishedAt":183,"deprecated":45,"deprecatedReason":82,"licenses":184,"advisoryIds":185,"links":187,"relatedProjects":191,"attestations":195,"verifiedAttestation":45,"projectStatus":196},"resolved","2026-08-13T02:29:21.454Z","2024-01-23T06:32:58Z",[87],[89,186],"PYSEC-2026-2270",[188],{"label":189,"url":190},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",[192],{"id":193,"relationType":189,"relationProvenance":194},"github.com\u002Ftheskumar\u002Fpython-dotenv","UNVERIFIED_METADATA",[],"active",{"version":120,"repositoryCount":198,"occurrenceCount":198,"ageDays":199,"advisoryIds":200,"metadata":201},2,505,[89],{"state":181,"checkedAt":182,"publishedAt":202,"deprecated":45,"deprecatedReason":82,"licenses":203,"advisoryIds":204,"links":205,"relatedProjects":207,"attestations":209,"verifiedAttestation":45,"projectStatus":196},"2025-03-25T10:14:55Z",[87],[89,186],[206],{"label":189,"url":190},[208],{"id":193,"relationType":189,"relationProvenance":194},[],{"version":145,"repositoryCount":198,"occurrenceCount":198,"ageDays":211,"advisoryIds":212,"metadata":213},414,[89],{"state":181,"checkedAt":182,"publishedAt":214,"deprecated":45,"deprecatedReason":82,"licenses":215,"advisoryIds":216,"links":217,"relatedProjects":219,"attestations":221,"verifiedAttestation":45,"projectStatus":196},"2025-06-24T04:21:06Z",[87],[89,186],[218],{"label":189,"url":190},[220],{"id":193,"relationType":189,"relationProvenance":194},[],{"version":113,"repositoryCount":34,"occurrenceCount":34,"ageDays":223,"advisoryIds":224,"metadata":225},290,[89],{"state":181,"checkedAt":182,"publishedAt":226,"deprecated":45,"deprecatedReason":82,"licenses":227,"advisoryIds":228,"links":229,"relatedProjects":234,"attestations":238,"verifiedAttestation":90,"projectStatus":196},"2025-10-26T15:12:09Z",[87],[89,186],[230,231],{"label":189,"url":190},{"label":232,"url":233},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-dotenv\u002F1.2.1\u002Fpython_dotenv-1.2.1-py3-none-any.whl\u002Fprovenance",[235,236],{"id":193,"relationType":189,"relationProvenance":194},{"id":193,"relationType":189,"relationProvenance":237},"PYPI_PUBLISH_ATTESTATION",[239],{"type":240,"url":233,"verified":90,"sourceRepository":190,"commit":241},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","eaf2a9129ccec6febda0f741eb3bb852c3f947bd",{"version":98,"repositoryCount":198,"occurrenceCount":34,"ageDays":243,"advisoryIds":244,"metadata":245},164,[],{"state":181,"checkedAt":182,"publishedAt":246,"deprecated":45,"deprecatedReason":82,"licenses":247,"advisoryIds":248,"links":249,"relatedProjects":253,"attestations":256,"verifiedAttestation":90,"projectStatus":196},"2026-03-01T16:00:25Z",[87],[],[250,251],{"label":189,"url":190},{"label":232,"url":252},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fpython-dotenv\u002F1.2.2\u002Fpython_dotenv-1.2.2-py3-none-any.whl\u002Fprovenance",[254,255],{"id":193,"relationType":189,"relationProvenance":194},{"id":193,"relationType":189,"relationProvenance":237},[257],{"type":240,"url":252,"verified":90,"sourceRepository":190,"commit":258},"36004e0e34be7665ff2b11a8a4005144f76f176d",{"occurrences":260,"occurrenceCount":84},[261,269,276,281,288,294,299,304,310,315,321,326,331,336,341],{"id":262,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":263,"direct":82,"development":82,"sourceKind":264,"filePath":265,"blobSha":266,"sourceUrl":267,"commitSha":268},"component:da8b16da0d34363196754117","pypi:python-dotenv@1.0.1","spdx-yaml","SPDX_v2.0.0.yml","e9e46566a2217346214d08f9dede99d8821b3c68","https:\u002F\u002Fgitlab.opencode.de\u002Fiqsh\u002Fcollaboration-online-board\u002Fai\u002F-\u002Fblob\u002F7cc4cbe5064bc5ede2426caf6981c5e9d0509327\u002FSPDX_v2.0.0.yml","7cc4cbe5064bc5ede2426caf6981c5e9d0509327",{"id":270,"repositoryId":108,"repositorySlug":109,"repositoryName":110,"repositoryPathWithNamespace":111,"ecosystem":80,"name":81,"identity":79,"version":113,"versionKey":271,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:85b4bb8a5edfe4d74770976e","pypi:python-dotenv@1.2.1","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":277,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":80,"name":81,"identity":79,"version":113,"versionKey":271,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":278,"sourceUrl":279,"commitSha":280},"component:57d5264095482389eb492c81","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":282,"repositoryId":115,"repositorySlug":116,"repositoryName":117,"repositoryPathWithNamespace":118,"ecosystem":80,"name":81,"identity":79,"version":120,"versionKey":283,"direct":82,"development":45,"sourceKind":284,"filePath":55,"blobSha":285,"sourceUrl":286,"commitSha":287},"component:3d33699a6c762eb6e6031b55","pypi:python-dotenv@1.1.0","poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","fc7e24cd546449ac9fdee4ad78aab861e0c89666",{"id":289,"repositoryId":140,"repositorySlug":141,"repositoryName":142,"repositoryPathWithNamespace":143,"ecosystem":80,"name":81,"identity":79,"version":145,"versionKey":290,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:80ce08deb9e0bb8d28749a30","pypi:python-dotenv@1.1.1","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":295,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":263,"direct":82,"development":45,"sourceKind":284,"filePath":55,"blobSha":296,"sourceUrl":297,"commitSha":298},"component:5df79df226a63fcc63f9eefd","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":300,"repositoryId":147,"repositorySlug":148,"repositoryName":149,"repositoryPathWithNamespace":150,"ecosystem":80,"name":81,"identity":79,"version":145,"versionKey":290,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":301,"sourceUrl":302,"commitSha":303},"component:b93a676f882a03ccbc92604c","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":305,"repositoryId":128,"repositorySlug":129,"repositoryName":130,"repositoryPathWithNamespace":131,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":306,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":307,"sourceUrl":308,"commitSha":309},"component:809308a559e305ec04a5fe69","pypi:python-dotenv@1.2.2","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":311,"repositoryId":153,"repositorySlug":154,"repositoryName":155,"repositoryPathWithNamespace":156,"ecosystem":80,"name":81,"identity":79,"version":120,"versionKey":283,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":312,"sourceUrl":313,"commitSha":314},"component:4d6d5e9bf9d12e321fdcb350","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":316,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":306,"direct":82,"development":82,"sourceKind":272,"filePath":317,"blobSha":318,"sourceUrl":319,"commitSha":320},"component:36f530825c91fd14ab66bfd4","mucgpt-assistant-service-migrations\u002Fuv.lock","3a5359c8b1106f9e3c8ced27e857ac50de3faef1","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-assistant-service-migrations\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"id":322,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":306,"direct":82,"development":82,"sourceKind":272,"filePath":323,"blobSha":324,"sourceUrl":325,"commitSha":320},"component:c93c5f3d750722741bb6d044","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-assistant-service\u002Fuv.lock",{"id":327,"repositoryId":93,"repositorySlug":94,"repositoryName":95,"repositoryPathWithNamespace":96,"ecosystem":80,"name":81,"identity":79,"version":98,"versionKey":306,"direct":82,"development":82,"sourceKind":272,"filePath":328,"blobSha":329,"sourceUrl":330,"commitSha":320},"component:0a9ed2bc1116a6599fb9d757","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock",{"id":332,"repositoryId":159,"repositorySlug":160,"repositoryName":161,"repositoryPathWithNamespace":162,"ecosystem":80,"name":81,"identity":79,"version":106,"versionKey":263,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":333,"sourceUrl":334,"commitSha":335},"component:5b09bc0db8900fe049fceefa","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":337,"repositoryId":165,"repositorySlug":166,"repositoryName":167,"repositoryPathWithNamespace":168,"ecosystem":80,"name":81,"identity":79,"version":113,"versionKey":271,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":338,"sourceUrl":339,"commitSha":340},"component:951c36fceba098203a02550a","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":342,"repositoryId":171,"repositorySlug":172,"repositoryName":173,"repositoryPathWithNamespace":174,"ecosystem":80,"name":81,"identity":79,"version":113,"versionKey":271,"direct":82,"development":82,"sourceKind":272,"filePath":54,"blobSha":343,"sourceUrl":344,"commitSha":345},"component:578799d87de7bbb6ff4c8c40","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","f64bf528432908908d92b8263d6933301033bb7f",{"repositories":347,"vulnerabilities":374},[348,350,352,354,356,358,360,362,364,366,368,370,372],{"id":93,"slug":94,"name":95,"pathWithNamespace":96,"versions":349,"evidenceCount":99},[98],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":351,"evidenceCount":32},[106],{"id":108,"slug":109,"name":110,"pathWithNamespace":111,"versions":353,"evidenceCount":32},[113],{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":355,"evidenceCount":32},[120],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":357,"evidenceCount":32},[106],{"id":128,"slug":129,"name":130,"pathWithNamespace":131,"versions":359,"evidenceCount":32},[98],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":361,"evidenceCount":32},[113],{"id":140,"slug":141,"name":142,"pathWithNamespace":143,"versions":363,"evidenceCount":32},[145],{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":365,"evidenceCount":32},[145],{"id":153,"slug":154,"name":155,"pathWithNamespace":156,"versions":367,"evidenceCount":32},[120],{"id":159,"slug":160,"name":161,"pathWithNamespace":162,"versions":369,"evidenceCount":32},[106],{"id":165,"slug":166,"name":167,"pathWithNamespace":168,"versions":371,"evidenceCount":32},[113],{"id":171,"slug":172,"name":173,"pathWithNamespace":174,"versions":373,"evidenceCount":32},[113],[375],{"id":89,"slug":376,"dossier":45,"summary":377,"aliases":378,"sourceIds":380,"published":381,"modified":382,"checkedAt":7,"severity":383,"references":387,"versionKeys":403,"packageCount":32,"repositoryCount":404},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[379,186],"CVE-2026-28684",[89,186],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[384],{"type":385,"score":386},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[388,391,394,396,399,401],{"type":389,"url":390},"FIX","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":392,"url":393},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":389,"url":395},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":397,"url":398},"WEB","https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":400,"url":190},"PACKAGE",{"type":392,"url":402},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[263,283,290,271],11,1786593601434]