Search for packages
| purl | pkg:pypi/moin@1.7 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2010-13
Aliases: CVE-2009-4762 GHSA-jj23-fj2v-m872 |
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, … | There are no reported fixed by versions. |
|
PYSEC-2008-12
Aliases: CVE-2008-1937 GHSA-rqxp-6926-hphr |
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly … | There are no reported fixed by versions. |
|
PYSEC-2009-13
Aliases: CVE-2008-6603 GHSA-wc8w-gh5m-62fv |
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote … | There are no reported fixed by versions. |