Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/moin@1.7.0
purl pkg:pypi/moin@1.7.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-q7q4-5g8p-33fq
Aliases:
CVE-2008-3381
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in `macro/AdvancedSearch.py` in moin (and MoinMoin) 1.6.3 and 1.7.0 … There are no reported fixed by versions.
GHSA-jj23-fj2v-m872
Aliases:
CVE-2009-4762
MoinMoin Improper Access Control vulnerability MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances … There are no reported fixed by versions.
PYSEC-2008-13
Aliases:
CVE-2008-3381
GHSA-q7q4-5g8p-33fq
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary … There are no reported fixed by versions.
This package is not known to fix any advisories.