Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/moin@1.8.0
purl pkg:pypi/moin@1.8.0
Next non-vulnerable version 1.8.1
Latest non-vulnerable version 1.9.11
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-5k2q-y419-qbcf
Aliases:
CVE-2009-4762
GHSA-jj23-fj2v-m872
PYSEC-2010-13
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended access restrictions by requesting an item, a different vulnerability than CVE-2008-6603.
1.8.3
Affected by 0 other vulnerabilities.
VCID-8xsp-chsd-cfhp
Aliases:
CVE-2010-0828
GHSA-fc72-v54c-x9jg
PYSEC-2010-28
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.
1.8.8
Affected by 0 other vulnerabilities.
1.9.3
Affected by 11 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:42:21.027499+00:00 GitLab Importer Affected by VCID-5k2q-y419-qbcf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/moin/CVE-2009-4762.yml 38.6.0
2026-06-02T04:42:20.869404+00:00 GitLab Importer Affected by VCID-8xsp-chsd-cfhp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/moin/CVE-2010-0828.yml 38.6.0