Theskumar Python-dotenv vulnerabilities

• saurabh-kumar python-dotenv python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback CVE-2026-28684 Fix available 6.6 MediumApril 20, 2026