Search for packages
| purl | pkg:pypi/moin@1.9.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2yaq-3m4p-q3bu
Aliases: CVE-2020-15275 GHSA-4q96-6xhq-ff43 PYSEC-2020-241 |
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes. |
Affected by 0 other vulnerabilities. |
|
VCID-4fn8-ab2r-23dk
Aliases: CVE-2017-5934 GHSA-42fp-4hm3-j8r7 PYSEC-2018-47 |
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
Affected by 2 other vulnerabilities. |
|
VCID-kjqq-u9hy-5yda
Aliases: CVE-2020-25074 GHSA-52q8-877j-gghq PYSEC-2020-67 |
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1kv8-4wn6-yydy | MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component. |
CVE-2016-7146
PYSEC-2016-30 |
| VCID-5hn2-1bvq-jfdh | MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component. |
CVE-2016-7148
PYSEC-2016-31 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:07:55.890177+00:00 | Pypa Importer | Affected by | VCID-2yaq-3m4p-q3bu | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2020-241.yaml | 38.6.0 |
| 2026-06-02T04:07:55.806050+00:00 | Pypa Importer | Affected by | VCID-kjqq-u9hy-5yda | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2020-67.yaml | 38.6.0 |
| 2026-06-02T04:05:21.222108+00:00 | Pypa Importer | Affected by | VCID-4fn8-ab2r-23dk | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2018-47.yaml | 38.6.0 |
| 2026-06-02T04:04:25.377907+00:00 | Pypa Importer | Fixing | VCID-5hn2-1bvq-jfdh | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2016-31.yaml | 38.6.0 |
| 2026-06-02T04:04:25.298833+00:00 | Pypa Importer | Fixing | VCID-1kv8-4wn6-yydy | https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2016-30.yaml | 38.6.0 |