MEDIUM6.1PyPI
GHSA-2j76-26qq-7rvv· CVE-2010-2969, PYSEC-2010-17MoinMoin cross-site scripting (XSS) vulnerability
Modified: 9/26/2024
package
PyPI/moin
pkg:pypi/moin
MEDIUM6.1PyPI
GHSA-3x76-j3jj-439j· CVE-2016-7148, PYSEC-2016-31MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 10/1/2024
MEDIUM6.1PyPI
GHSA-42fp-4hm3-j8r7· CVE-2017-5934, PYSEC-2018-47Moderate severity vulnerability that affects moin
Modified: 9/27/2024
MEDIUM6.1PyPI
GHSA-452h-rx28-49w9· CVE-2012-6082, PYSEC-2013-23MoinMoin Cross-site scripting (XSS) vulnerability
Modified: 9/26/2024
MEDIUM6.1PyPI
GHSA-4pfg-2frf-f67v· CVE-2009-1482, PYSEC-2009-6MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/30/2024
HIGH8.7PyPI
GHSA-4q96-6xhq-ff43· CVE-2020-15275, PYSEC-2020-241malicious SVG attachment causing stored XSS vulnerability
Modified: 7/8/2026
HIGH8.8PyPI
GHSA-52q8-877j-gghq· CVE-2020-25074, PYSEC-2020-67MoinMoin vulnerable to remote code execution via cache action
Modified: 9/10/2026
MEDIUMPyPI
GHSA-53wj-6m7w-j6mj· CVE-2008-0780, PYSEC-2026-667MoinMoin Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
MEDIUMPyPI
GHSA-574f-mh6m-c6qm· CVE-2010-0668, PYSEC-2010-15MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration
Modified: 12/6/2024
MEDIUM6.1PyPI
GHSA-5fq5-pfv8-mrfv· CVE-2016-9119, PYSEC-2017-20MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/26/2024
HIGHPyPI
GHSA-5jjr-gmq3-f986· CVE-2010-0717, PYSEC-2010-3MoinMoin has improper default configuration
Modified: 12/5/2024
MEDIUM6.1PyPI
GHSA-5m2m-27cg-7v4v· CVE-2010-2487, PYSEC-2010-16MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/26/2024
MEDIUMPyPI
GHSA-6766-r2rx-mfw9· CVE-2008-0782, PYSEC-2026-668MoinMoin Directory traversal vulnerability
Modified: 7/6/2026
MEDIUM4.3PyPI
GHSA-6gx4-29v9-g9q5· CVE-2012-6495, PYSEC-2013-7MoinMoin Multiple vulnerable to directory traversal
Modified: 9/26/2024
MEDIUMPyPI
GHSA-775g-4482-pm94· CVE-2008-0781, PYSEC-2026-669MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
MEDIUMPyPI
GHSA-7hjm-hqgj-xv9f· CVE-2009-0260, PYSEC-2026-670MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
HIGHPyPI
GHSA-7jrp-r6jx-32cw· CVE-2004-0708, PYSEC-2026-671MoinMoin allows administrative access
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-876c-qmcf-cxv6· CVE-2010-0667, PYSEC-2010-14MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set
Modified: 9/30/2024
MEDIUMPyPI
GHSA-8fj9-pj4p-4vq7· CVE-2008-1098, PYSEC-2026-672MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
HIGHPyPI
GHSA-977v-29j9-9rxc· CVE-2010-0669, PYSEC-2010-2MoinMoin improper sanitizes user profiles
Modified: 12/6/2024
MEDIUMPyPI
GHSA-9gj2-ph57-56f5· CVE-2007-0901, PYSEC-2026-673MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
Modified: 7/6/2026
HIGHPyPI
GHSA-9xh4-wpx8-rg2w· CVE-2004-1463, PYSEC-2026-674MoinMoin Improper Privilege Management
Modified: 7/6/2026
MEDIUMPyPI
GHSA-cmg7-xr2j-4r9v· CVE-2007-2637, PYSEC-2026-675MoinMoin Improper ACL handling for calendars and includes
Modified: 7/6/2026
MEDIUMPyPI
GHSA-cx94-3h5x-cc57· CVE-2009-0312, PYSEC-2026-676MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
Modified: 7/6/2026
MEDIUM5.4PyPI
GHSA-fc72-v54c-x9jg· CVE-2010-0828, PYSEC-2010-28MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/26/2024
MEDIUM6.1PyPI
GHSA-fj26-q4vh-85f6· CVE-2016-7146, PYSEC-2016-30MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/27/2024
MEDIUM5.4PyPI
GHSA-g4mx-rm5q-vh24· CVE-2012-4404, PYSEC-2012-10MoinMoin Improper Access Control
Modified: 9/26/2024
MEDIUM6.1PyPI
GHSA-gxh5-r8gp-pjc3· CVE-2010-2970, PYSEC-2010-18MoinMoin cross-site scripting (XSS) vulnerability
Modified: 9/25/2024
MEDIUM5.3PyPI
GHSA-jhxw-4hw4-mhh7· CVE-2008-6548, PYSEC-2009-11MoinMoin improper access control on the included page for the rst parser
Modified: 10/1/2024
HIGH7.5PyPI
GHSA-jj23-fj2v-m872· CVE-2009-4762, PYSEC-2010-13MoinMoin Improper Access Control vulnerability
Modified: 10/1/2024
MEDIUMPyPI
GHSA-jj2f-57jg-5rm6· CVE-2008-1099, PYSEC-2026-677MoinMoin Improper Access Control
Modified: 7/6/2026
MEDIUM6.3PyPI
GHSA-m2c4-jgmm-fvq3· CVE-2012-6081, PYSEC-2013-6MoinMoin Multiple unrestricted file upload vulnerabilities
Modified: 9/26/2024
MEDIUMPyPI
GHSA-m84w-vgwf-p893· CVE-2007-0857, PYSEC-2026-678MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
MEDIUM6.1PyPI
GHSA-m9j7-xcj7-42j9· CVE-2011-1058, PYSEC-2011-6MoinMoin Cross-site Scripting (XSS) vulnerability
Modified: 9/26/2024
MEDIUMPyPI
GHSA-mxh8-xgq9-w782· CVE-2007-0902, PYSEC-2026-679MoinMoin Insertion of Sensitive Information into Log File
Modified: 7/6/2026
MEDIUM6.1PyPI
GHSA-q7q4-5g8p-33fq· CVE-2008-3381, PYSEC-2008-13MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 11/26/2024
HIGH7.5PyPI
GHSA-rqxp-6926-hphr· CVE-2008-1937, PYSEC-2008-12MoinMoin vulnerable to privilege escalation
Modified: 11/26/2024
MEDIUM5.3PyPI
GHSA-v33q-2xcj-4f3m· CVE-2012-6080, PYSEC-2013-5MoinMoin Directory Traversal vulnerability
Modified: 9/26/2024
HIGHPyPI
GHSA-v744-h36c-hv5j· CVE-2004-1462, PYSEC-2026-680MoinMoin Improper Access Control
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-wc8w-gh5m-62fv· CVE-2008-6603, PYSEC-2009-13MoinMoin Access Restrictions Bypassed due to improper ACL enforcement
Modified: 11/26/2024
HIGH7.5PyPI
GHSA-wjjc-m3fc-fcm8· CVE-2008-6549, PYSEC-2009-12MoinMoin Denial of Service vulnerability via password_checker function
Modified: 11/26/2024
—PyPI
PYSEC-2008-12· CVE-2008-1937, GHSA-rqxp-6926-hphrModified: 7/2/2026
—PyPI
PYSEC-2008-13· CVE-2008-3381, GHSA-q7q4-5g8p-33fqModified: 7/13/2026
—PyPI
PYSEC-2009-11· CVE-2008-6548, GHSA-jhxw-4hw4-mhh7Modified: 6/10/2026
—PyPI
PYSEC-2009-12· CVE-2008-6549, GHSA-wjjc-m3fc-fcm8Modified: 11/25/2024
—PyPI
PYSEC-2009-13· CVE-2008-6603, GHSA-wc8w-gh5m-62fvModified: 7/2/2026
—PyPI
PYSEC-2009-6· CVE-2009-1482, GHSA-4pfg-2frf-f67vModified: 6/10/2026
—PyPI
PYSEC-2010-13· CVE-2009-4762, GHSA-jj23-fj2v-m872Modified: 6/10/2026
—PyPI
PYSEC-2010-14· CVE-2010-0667, GHSA-876c-qmcf-cxv6Modified: 6/10/2026
—PyPI
PYSEC-2010-15· CVE-2010-0668, GHSA-574f-mh6m-c6qmModified: 6/10/2026
—PyPI
PYSEC-2010-16· CVE-2010-2487, GHSA-5m2m-27cg-7v4vModified: 6/10/2026
—PyPI
PYSEC-2010-17· CVE-2010-2969, GHSA-2j76-26qq-7rvvModified: 6/10/2026
—PyPI
PYSEC-2010-18· CVE-2010-2970, GHSA-gxh5-r8gp-pjc3Modified: 6/10/2026
—PyPI
PYSEC-2010-2· CVE-2010-0669, GHSA-977v-29j9-9rxcModified: 6/10/2026
—PyPI
PYSEC-2010-28· CVE-2010-0828, GHSA-fc72-v54c-x9jgModified: 6/10/2026
—PyPI
PYSEC-2010-3· CVE-2010-0717, GHSA-5jjr-gmq3-f986Modified: 6/10/2026
—PyPI
PYSEC-2011-6· CVE-2011-1058, GHSA-m9j7-xcj7-42j9Modified: 6/10/2026
—PyPI
PYSEC-2012-10· CVE-2012-4404, GHSA-g4mx-rm5q-vh24Modified: 6/10/2026
—PyPI
PYSEC-2013-23· CVE-2012-6082, GHSA-452h-rx28-49w9Modified: 6/10/2026
—PyPI
PYSEC-2013-5· CVE-2012-6080, GHSA-v33q-2xcj-4f3mModified: 6/10/2026
—PyPI
PYSEC-2013-6· CVE-2012-6081, GHSA-m2c4-jgmm-fvq3Modified: 6/10/2026
—PyPI
PYSEC-2013-7· CVE-2012-6495, GHSA-6gx4-29v9-g9q5Modified: 6/10/2026
—PyPI
PYSEC-2016-30· CVE-2016-7146, GHSA-fj26-q4vh-85f6Modified: 6/10/2026
—PyPI
PYSEC-2016-31· CVE-2016-7148, GHSA-3x76-j3jj-439jModified: 6/10/2026
—PyPI
PYSEC-2017-20· CVE-2016-9119, GHSA-5fq5-pfv8-mrfvModified: 6/10/2026
—PyPI
PYSEC-2018-47· CVE-2017-5934, GHSA-42fp-4hm3-j8r7Modified: 11/8/2023
—PyPI
PYSEC-2020-241· CVE-2020-15275, GHSA-4q96-6xhq-ff43Modified: 11/8/2023
—PyPI
PYSEC-2020-67· CVE-2020-25074, GHSA-52q8-877j-gghqModified: 11/8/2023
—PyPI
PYSEC-2026-667· CVE-2008-0780, GHSA-53wj-6m7w-j6mjMoinMoin Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
—PyPI
PYSEC-2026-668· CVE-2008-0782, GHSA-6766-r2rx-mfw9MoinMoin Directory traversal vulnerability
Modified: 7/6/2026
—PyPI
PYSEC-2026-669· CVE-2008-0781, GHSA-775g-4482-pm94MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
—PyPI
PYSEC-2026-670· CVE-2009-0260, GHSA-7hjm-hqgj-xv9fMoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
—PyPI
PYSEC-2026-671· CVE-2004-0708, GHSA-7jrp-r6jx-32cwMoinMoin allows administrative access
Modified: 7/6/2026
—PyPI
PYSEC-2026-672· CVE-2008-1098, GHSA-8fj9-pj4p-4vq7MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
—PyPI
PYSEC-2026-673· CVE-2007-0901, GHSA-9gj2-ph57-56f5MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
Modified: 7/6/2026
—PyPI
PYSEC-2026-674· CVE-2004-1463, GHSA-9xh4-wpx8-rg2wMoinMoin Improper Privilege Management
Modified: 7/6/2026
—PyPI
PYSEC-2026-675· CVE-2007-2637, GHSA-cmg7-xr2j-4r9vMoinMoin Improper ACL handling for calendars and includes
Modified: 7/6/2026
—PyPI
PYSEC-2026-676· CVE-2009-0312, GHSA-cx94-3h5x-cc57MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
Modified: 7/6/2026
—PyPI
PYSEC-2026-677· CVE-2008-1099, GHSA-jj2f-57jg-5rm6MoinMoin Improper Access Control
Modified: 7/6/2026
—PyPI
PYSEC-2026-678· CVE-2007-0857, GHSA-m84w-vgwf-p893MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Modified: 7/6/2026
—PyPI
PYSEC-2026-679· CVE-2007-0902, GHSA-mxh8-xgq9-w782MoinMoin Insertion of Sensitive Information into Log File
Modified: 7/6/2026
—PyPI
PYSEC-2026-680· CVE-2004-1462, GHSA-v744-h36c-hv5jMoinMoin Improper Access Control
Modified: 7/6/2026