moin (PyPI)
Advisories
92
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.9.11 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "moin>=1.9.11"poetry
poetry add "moin>=1.9.11"uv
uv add "moin>=1.9.11"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-cx94-3h5x-cc57 MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature |
Medium EPSS 2.37% |
< 1.8.2 | 1.8.2 |
| GHSA-cx94-3h5x-cc57 MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature |
Medium EPSS 2.37% |
< 1.8.2 | 1.8.2 |
| GHSA-7hjm-hqgj-xv9f MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 5.48% |
< 1.8.1 | 1.8.1 |
| GHSA-7hjm-hqgj-xv9f MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 5.48% |
< 1.8.1 | 1.8.1 |
| GHSA-jj2f-57jg-5rm6 MoinMoin Improper Access Control |
Medium EPSS 2.02% |
<= 1.5.8 | No fix yet |
| GHSA-jj2f-57jg-5rm6 MoinMoin Improper Access Control |
Medium EPSS 2.02% |
<= 1.5.8 | No fix yet |
| GHSA-8fj9-pj4p-4vq7 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 1.82% |
<= 1.5.8 | No fix yet |
| GHSA-8fj9-pj4p-4vq7 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 1.82% |
<= 1.5.8 | No fix yet |
| GHSA-6766-r2rx-mfw9 MoinMoin Directory traversal vulnerability |
Medium EPSS 14.90% |
<= 1.5.8 | No fix yet |
| GHSA-6766-r2rx-mfw9 MoinMoin Directory traversal vulnerability |
Medium EPSS 14.90% |
<= 1.5.8 | No fix yet |
| GHSA-53wj-6m7w-j6mj MoinMoin Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.75% |
>= 1.5, < 1.6.1 | 1.6.1 |
| GHSA-53wj-6m7w-j6mj MoinMoin Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.75% |
>= 1.5, <= 1.5.8 | No fix yet |
| GHSA-775g-4482-pm94 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.56% |
<= 1.5.8 | No fix yet |
| GHSA-775g-4482-pm94 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.56% |
<= 1.5.8 | No fix yet |
| GHSA-53wj-6m7w-j6mj MoinMoin Cross-site scripting (XSS) vulnerability |
Medium EPSS 1.75% |
>= 1.6, < 1.6.1 | 1.6.1 |
| GHSA-cmg7-xr2j-4r9v MoinMoin Improper ACL handling for calendars and includes |
Medium EPSS 1.49% |
< 1.5.8 | 1.5.8 |
| GHSA-cmg7-xr2j-4r9v MoinMoin Improper ACL handling for calendars and includes |
Medium EPSS 1.49% |
< 1.5.8 | 1.5.8 |
| GHSA-mxh8-xgq9-w782 MoinMoin Insertion of Sensitive Information into Log File |
Medium EPSS 1.36% |
>= 1.5.7, < 1.5.8 | 1.5.8 |
| GHSA-mxh8-xgq9-w782 MoinMoin Insertion of Sensitive Information into Log File |
Medium EPSS 1.36% |
>= 1.5.7, < 1.5.8 | 1.5.8 |
| GHSA-9gj2-ph57-56f5 MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters |
Medium EPSS 1.78% |
< 1.5.8 | 1.5.8 |
| GHSA-9gj2-ph57-56f5 MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters |
Medium EPSS 1.78% |
< 1.5.8 | 1.5.8 |
| GHSA-m84w-vgwf-p893 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.42% |
< 1.5.7 | 1.5.7 |
| GHSA-m84w-vgwf-p893 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.42% |
< 1.5.7 | 1.5.7 |
| GHSA-9xh4-wpx8-rg2w MoinMoin Improper Privilege Management |
High EPSS 2.28% |
< 1.2.3 | 1.2.3 |
| GHSA-9xh4-wpx8-rg2w MoinMoin Improper Privilege Management |
High EPSS 2.28% |
< 1.2.3 | 1.2.3 |
| GHSA-v744-h36c-hv5j MoinMoin Improper Access Control |
High EPSS 1.60% |
< 1.2.3 | 1.2.3 |
| GHSA-v744-h36c-hv5j MoinMoin Improper Access Control |
High EPSS 1.60% |
< 1.2.3 | 1.2.3 |
| GHSA-7jrp-r6jx-32cw MoinMoin allows administrative access |
High EPSS 1.77% |
< 1.2.2 | 1.2.2 |
| GHSA-7jrp-r6jx-32cw MoinMoin allows administrative access |
High EPSS 1.77% |
< 1.2.2 | 1.2.2 |
| GHSA-4q96-6xhq-ff43 malicious SVG attachment causing stored XSS vulnerability |
High EPSS 1.75% |
< 1.9.11 | 1.9.11 |
| GHSA-4q96-6xhq-ff43 malicious SVG attachment causing stored XSS vulnerability |
High EPSS 1.75% |
< 1.9.11 | 1.9.11 |
| GHSA-52q8-877j-gghq MoinMoin vulnerable to remote code execution via cache action |
High EPSS 6.55% |
< 1.9.11 | 1.9.11 |
| GHSA-52q8-877j-gghq MoinMoin vulnerable to remote code execution via cache action |
High EPSS 6.55% |
< 1.9.11 | 1.9.11 |
| GHSA-42fp-4hm3-j8r7 Moderate severity vulnerability that affects moin |
Medium EPSS 1.94% |
< 1.9.10 | 1.9.10 |
| GHSA-42fp-4hm3-j8r7 Moderate severity vulnerability that affects moin |
Medium EPSS 1.94% |
< 1.9.10 | 1.9.10 |
| GHSA-5fq5-pfv8-mrfv MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.46% |
< 1.9.8 | 1.9.8 |
| GHSA-5fq5-pfv8-mrfv MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.46% |
< 1.9.8 | 1.9.8 |
| GHSA-3x76-j3jj-439j MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.19% |
< 1.9.9 | 1.9.9 |
| GHSA-fj26-q4vh-85f6 MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.20% |
< 1.9.9 | 1.9.9 |
| GHSA-fj26-q4vh-85f6 MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.20% |
>= 1.9.8, < 1.9.9 | 1.9.9 |
| GHSA-3x76-j3jj-439j MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 1.19% |
< 1.9.9 | 1.9.9 |
| GHSA-m2c4-jgmm-fvq3 MoinMoin Multiple unrestricted file upload vulnerabilities |
Medium EPSS 35.35% |
< 1.9.6 | 1.9.6 |
| GHSA-m2c4-jgmm-fvq3 MoinMoin Multiple unrestricted file upload vulnerabilities |
Medium EPSS 35.35% |
< 1.9.6 | 1.9.6 |
| GHSA-6gx4-29v9-g9q5 MoinMoin Multiple vulnerable to directory traversal |
Medium EPSS 18.71% |
< 1.9.6 | 1.9.6 |
| GHSA-v33q-2xcj-4f3m MoinMoin Directory Traversal vulnerability |
Medium EPSS 4.05% |
>= 1.9.3, < 1.9.6 | 1.9.6 |
| GHSA-6gx4-29v9-g9q5 MoinMoin Multiple vulnerable to directory traversal |
Medium EPSS 18.71% |
< 1.9.6 | 1.9.6 |
| GHSA-v33q-2xcj-4f3m MoinMoin Directory Traversal vulnerability |
Medium EPSS 4.05% |
>= 1.9.3, < 1.9.6 | 1.9.6 |
| GHSA-452h-rx28-49w9 MoinMoin Cross-site scripting (XSS) vulnerability |
Medium EPSS 2.11% |
< 1.9.6 | 1.9.6 |
| GHSA-452h-rx28-49w9 MoinMoin Cross-site scripting (XSS) vulnerability |
Medium EPSS 2.11% |
< 1.9.6 | 1.9.6 |
| GHSA-g4mx-rm5q-vh24 MoinMoin Improper Access Control |
Medium EPSS 2.11% |
>= 1.9, < 1.9.5 | 1.9.5 |
| GHSA-g4mx-rm5q-vh24 MoinMoin Improper Access Control |
Medium EPSS 2.11% |
>= 1.9, < 1.9.5 | 1.9.5 |
| GHSA-m9j7-xcj7-42j9 MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.54% |
< 1.9.3 | 1.9.3 |
| GHSA-m9j7-xcj7-42j9 MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.54% |
< 1.9.3 | 1.9.3 |
| GHSA-5m2m-27cg-7v4v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.68% |
>= 1.8.0, < 1.8.8 | 1.8.8 |
| GHSA-5m2m-27cg-7v4v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.68% |
>= 1.8, < 1.8.8>= 1.9, < 1.9.3 | 1.8.81.9.3 |
| GHSA-5m2m-27cg-7v4v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.68% |
<= 1.7.3 | No fix yet |
| GHSA-5m2m-27cg-7v4v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.68% |
>= 1.9.0, < 1.9.3 | 1.9.3 |
| GHSA-gxh5-r8gp-pjc3 MoinMoin cross-site scripting (XSS) vulnerability |
Medium EPSS 2.55% |
>= 1.9.0, < 1.9.3 | 1.9.3 |
| GHSA-gxh5-r8gp-pjc3 MoinMoin cross-site scripting (XSS) vulnerability |
Medium EPSS 2.55% |
>= 1.9, < 1.9.3 | 1.9.3 |
| GHSA-2j76-26qq-7rvv MoinMoin cross-site scripting (XSS) vulnerability |
Medium EPSS 2.55% |
>= 1.9.0, < 1.9.3 | 1.9.3 |
| GHSA-2j76-26qq-7rvv MoinMoin cross-site scripting (XSS) vulnerability |
Medium EPSS 2.55% |
<= 1.7.3 | No fix yet |
| GHSA-2j76-26qq-7rvv MoinMoin cross-site scripting (XSS) vulnerability |
Medium EPSS 2.55% |
>= 1.9, < 1.9.3 | 1.9.3 |
| GHSA-fc72-v54c-x9jg MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.26% |
>= 1.9.0, < 1.9.3 | 1.9.3 |
| GHSA-fc72-v54c-x9jg MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.26% |
>= 1.8.0, < 1.8.8 | 1.8.8 |
| GHSA-fc72-v54c-x9jg MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.26% |
< 1.9.3 | 1.9.3 |
| GHSA-jj23-fj2v-m872 MoinMoin Improper Access Control vulnerability |
High EPSS 3.08% |
>= 1.7, < 1.7.3>= 1.8, < 1.8.3 | 1.7.31.8.3 |
| GHSA-jj23-fj2v-m872 MoinMoin Improper Access Control vulnerability |
High EPSS 3.08% |
>= 1.8.0, < 1.8.3 | 1.8.3 |
| GHSA-jj23-fj2v-m872 MoinMoin Improper Access Control vulnerability |
High EPSS 3.08% |
>= 1.7.0, < 1.7.3 | 1.7.3 |
| GHSA-574f-mh6m-c6qm MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration |
Medium EPSS 2.19% |
>= 1.8, < 1.8.7>= 1.9, < 1.9.2 | 1.8.71.9.2 |
| GHSA-574f-mh6m-c6qm MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration |
Medium EPSS 2.19% |
>= 1.5, < 1.8.7 | 1.8.7 |
| GHSA-5jjr-gmq3-f986 MoinMoin has improper default configuration |
High EPSS 2.03% |
< 1.8.7 | 1.8.7 |
| GHSA-5jjr-gmq3-f986 MoinMoin has improper default configuration |
High EPSS 2.03% |
< 1.8.7 | 1.8.7 |
| GHSA-977v-29j9-9rxc MoinMoin improper sanitizes user profiles |
High EPSS 1.90% |
< 1.8.7>= 1.9, < 1.9.2 | 1.8.71.9.2 |
| GHSA-977v-29j9-9rxc MoinMoin improper sanitizes user profiles |
High EPSS 1.90% |
>= 1.9, < 1.9.2 | 1.9.2 |
| GHSA-977v-29j9-9rxc MoinMoin improper sanitizes user profiles |
High EPSS 1.90% |
< 1.8.7 | 1.8.7 |
| GHSA-876c-qmcf-cxv6 MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set |
High EPSS 1.87% |
>= 1.9, < 1.9.1 | 1.9.1 |
| GHSA-876c-qmcf-cxv6 MoinMoin Exposure of Sensitive Disclosure when GATEWAY_INTERFACE variable is set |
High EPSS 1.87% |
>= 1.9, < 1.9.1 | 1.9.1 |
| GHSA-574f-mh6m-c6qm MoinMoin has multiple vulnerabilities related to superuser list, xmlrpc and OpenID configuration |
Medium EPSS 2.19% |
>= 1.9, < 1.9.2 | 1.9.2 |
| GHSA-4pfg-2frf-f67v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.50% |
< 1.8.3 | 1.8.3 |
| GHSA-4pfg-2frf-f67v MoinMoin Cross-site Scripting (XSS) vulnerability |
Medium EPSS 2.50% |
< 1.8.3 | 1.8.3 |
| GHSA-wc8w-gh5m-62fv MoinMoin Access Restrictions Bypassed due to improper ACL enforcement |
High EPSS 1.65% |
< 1.6.3>= 1.7, < 1.7.1 | 1.6.31.7.1 |
| GHSA-wc8w-gh5m-62fv MoinMoin Access Restrictions Bypassed due to improper ACL enforcement |
High EPSS 1.65% |
>= 1.7, < 1.7.1 | 1.7.1 |
| GHSA-wc8w-gh5m-62fv MoinMoin Access Restrictions Bypassed due to improper ACL enforcement |
High EPSS 1.65% |
< 1.6.3 | 1.6.3 |
| GHSA-jhxw-4hw4-mhh7 MoinMoin improper access control on the included page for the rst parser |
Medium EPSS 1.00% |
all versions | No fix yet |
| GHSA-wjjc-m3fc-fcm8 MoinMoin Denial of Service vulnerability via password_checker function |
High EPSS 1.48% |
< 1.6.1 | 1.6.1 |
| GHSA-jhxw-4hw4-mhh7 MoinMoin improper access control on the included page for the rst parser |
Medium EPSS 1.00% |
< 1.6.2 | 1.6.2 |
| GHSA-wjjc-m3fc-fcm8 MoinMoin Denial of Service vulnerability via password_checker function |
High EPSS 1.48% |
< 1.6.1 | 1.6.1 |
| GHSA-q7q4-5g8p-33fq MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.11% |
< 1.6.4>= 1.7.0, < 1.7.1 | 1.6.41.7.1 |
| GHSA-q7q4-5g8p-33fq MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.11% |
>= 1.7.0, < 1.7.1 | 1.7.1 |
| GHSA-q7q4-5g8p-33fq MoinMoin Multiple cross-site scripting (XSS) vulnerabilities |
Medium EPSS 2.11% |
< 1.6.4 | 1.6.4 |
| GHSA-rqxp-6926-hphr MoinMoin vulnerable to privilege escalation |
High EPSS 1.67% |
< 1.6.3>= 1.7, < 1.7.1 | 1.6.31.7.1 |
| GHSA-rqxp-6926-hphr MoinMoin vulnerable to privilege escalation |
High EPSS 1.67% |
< 1.6.3 | 1.6.3 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor