Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/moin@1.5.8
purl pkg:pypi/moin@1.5.8
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-53wj-6m7w-j6mj
Aliases:
CVE-2008-0780
MoinMoin Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote … There are no reported fixed by versions.
PYSEC-2026-672
Aliases:
CVE-2008-1098
GHSA-8fj9-pj4p-4vq7
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to … There are no reported fixed by versions.
PYSEC-2026-669
Aliases:
CVE-2008-0781
GHSA-775g-4482-pm94
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in `action/AttachFile.py` in MoinMoin 1.5.8 and earlier allow remote … There are no reported fixed by versions.
PYSEC-2026-677
Aliases:
CVE-2008-1099
GHSA-jj2f-57jg-5rm6
MoinMoin Improper Access Control `_macro_Getval` in `wikimacro.py` in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote … There are no reported fixed by versions.
PYSEC-2026-668
Aliases:
CVE-2008-0782
GHSA-6766-r2rx-mfw9
MoinMoin Directory traversal vulnerability Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via … There are no reported fixed by versions.
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
GHSA-9gj2-ph57-56f5
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin … CVE-2007-0901
PYSEC-2026-679
MoinMoin Insertion of Sensitive Information into Log File An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which … CVE-2007-0902
GHSA-mxh8-xgq9-w782
PYSEC-2026-675
MoinMoin Improper ACL handling for calendars and includes MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, … CVE-2007-2637
GHSA-cmg7-xr2j-4r9v
PYSEC-2026-673
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin … CVE-2007-0901
GHSA-9gj2-ph57-56f5