Skip to content

Product

pypi dotenv-sync vulnerabilities

1 published CVE affecting pypi dotenv-sync, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest pypi dotenv-sync CVEs

Newest publication first

  1. MAL-2026-6082 Malicious code in dotenv-sync (PyPI)

    Published
    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (c91932ecf0decc2b900d3e3cd6effe3c4cb1c4ec5ddfd98cde2460facf9f7ae1) On Windows, src/envsync/__init__.py (lines 39-44) unconditionally calls ctypes.CDLL on a bundled ~2.9MB PE file _parser.pyd at top-lev...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.