{"id":"ECHO-f84b-10a2-6d9d","upstream":["CVE-2026-28684","GHSA-mf9w-mj56-hr94"],"severity":[],"modified":"2026-06-10T10:07:57.678Z","affected":[{"package":{"ecosystem":"Echo:PyPI","name":"python-dotenv","purl":"pkg:pypi/python-dotenv"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1+echo.1"}]}]}],"references":[{"type":"WEB","url":"https://advisory.echohq.com/cve/CVE-2026-28684"}]}