Search for packages
| purl | pkg:pypi/moin@1.8.8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8xsp-chsd-cfhp | Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI. |
CVE-2010-0828
GHSA-fc72-v54c-x9jg PYSEC-2010-28 |
| VCID-9ck2-p7hx-4qex | Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py. |
CVE-2010-2487
PYSEC-2010-16 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:42:20.885346+00:00 | GitLab Importer | Fixing | VCID-8xsp-chsd-cfhp | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/moin/CVE-2010-0828.yml | 38.6.0 |
| 2026-06-02T04:03:10.108133+00:00 | Pypa Importer | Fixing | VCID-9ck2-p7hx-4qex | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2010-16.yaml | 38.6.0 |