Platform All capabilities Keep threats out Seawall: Network Protection Fairway: Connectivity & Traffic Priority Lookout: Threat Intelligence Know and harden your estate Deckhand: Endpoint Protection Quartermaster: Asset & Software Inventory Radar: Vulnerability Management Stay in control Safe Harbor: Backup & Recovery Helm: Identity & Access Gangway: Secure Remote Access Respond and prove it Logbook: Investigation & Incident Response Muster: Training, Drills & Awareness Chandler: Supplier & Third-Party Risk Bridge: Central Command & Evidence Hardware & more Network appliances Order routers Portal showcase How it works Plans Compare plans Essentials Custom Complete Who it's for Maritime & offshore Industry & energy No IT team You have an IT team Services NIS2 & maritime compliance Penetration testing Threat intelligence Vulnerability reporter Free tools IP address lookup Vulnerability lookup Malware hash lookup Free malware scan User agent lookup Regulatory clock Report Report a suspicious event
Contact us
npm packages

dotenv (npm) vulnerabilities

Check any version of dotenv (npm) by dotenv for known vulnerabilities, ranked by real-world exploitation and severity, with the version that fixes each one. Free, no account.

dotenv npm package, matched through OSV 0 versions checked

Checked against OSV, NVD and Red Hat, then ranked by real-world exploitation (CISA KEV) and exploit probability (EPSS). 5 free checks a day.

Versions already checked

Nobody has checked a version of dotenv here yet. Enter yours above: once it finds something, it is listed here for the next person.

Advisories seen for dotenv

None yet. They appear here as versions are checked.

NVD CVE.org OSV

More in npm packages

The JavaScript packages most applications depend on, checked against OSV.

lodash OpenJS Foundation express OpenJS Foundation axios Axios react Meta react-dom Meta next Vercel vue Vue.js @angular/core Google jquery OpenJS Foundation moment Moment.js minimist minimist node-fetch node-fetch

All 1,000 products

Do you run dotenv somewhere?

The Vulnerability Reporter inventories every machine and tells you when a new advisory applies to a version you actually run.

Explore the service