{"schema_version":1,"title":"moin (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 41 vulnerabilities in moin (PyPI): 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2009-0312, was published on 2 July 2026.","url":"https://junglewise.ai/threats/technologies/moin","json_url":"https://junglewise.ai/threats/technologies/moin.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/moin","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":41,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2009-0312","epss":0.0237,"slug":"cve-2009-0312-moinmoin-cross-site-scripting-xss-vulnerability-in-the-antispam","title":"PYSEC-2026-676 - MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:21.309699+00:00","url":"https://junglewise.ai/threats/cve-2009-0312-moinmoin-cross-site-scripting-xss-vulnerability-in-the-antispam"},{"cve":"CVE-2009-0260","epss":0.0548,"slug":"cve-2009-0260-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities","title":"PYSEC-2026-670 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:21.242604+00:00","url":"https://junglewise.ai/threats/cve-2009-0260-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities"},{"cve":"CVE-2008-1099","epss":0.0202,"slug":"cve-2008-1099-moinmoin-improper-access-control","title":"PYSEC-2026-677 - MoinMoin Improper Access Control","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.768903+00:00","url":"https://junglewise.ai/threats/cve-2008-1099-moinmoin-improper-access-control"},{"cve":"CVE-2008-1098","epss":0.0182,"slug":"cve-2008-1098-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities","title":"PYSEC-2026-672 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.698066+00:00","url":"https://junglewise.ai/threats/cve-2008-1098-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities"},{"cve":"CVE-2008-0782","epss":0.149,"slug":"cve-2008-0782-moinmoin-directory-traversal-vulnerability","title":"PYSEC-2026-668 - MoinMoin Directory traversal vulnerability","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.636177+00:00","url":"https://junglewise.ai/threats/cve-2008-0782-moinmoin-directory-traversal-vulnerability"},{"cve":"CVE-2008-0781","epss":0.0256,"slug":"cve-2008-0781-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities","title":"PYSEC-2026-669 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.575874+00:00","url":"https://junglewise.ai/threats/cve-2008-0781-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities"},{"cve":"CVE-2008-0780","epss":0.0175,"slug":"cve-2008-0780-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2026-667 - MoinMoin Cross-site scripting (XSS) vulnerability","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.523188+00:00","url":"https://junglewise.ai/threats/cve-2008-0780-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2007-2637","epss":0.0149,"slug":"cve-2007-2637-moinmoin-improper-acl-handling-for-calendars-and-includes","title":"PYSEC-2026-675 - MoinMoin Improper ACL handling for calendars and includes","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.287938+00:00","url":"https://junglewise.ai/threats/cve-2007-2637-moinmoin-improper-acl-handling-for-calendars-and-includes"},{"cve":"CVE-2007-0901","epss":0.0178,"slug":"cve-2007-0901-moinmoin-cross-site-scripting-xss-vulnerability-via-hitcounts-and","title":"PYSEC-2026-673 - MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.213871+00:00","url":"https://junglewise.ai/threats/cve-2007-0901-moinmoin-cross-site-scripting-xss-vulnerability-via-hitcounts-and"},{"cve":"CVE-2007-0902","epss":0.0136,"slug":"cve-2007-0902-moinmoin-insertion-of-sensitive-information-into-log-file","title":"PYSEC-2026-679 - MoinMoin Insertion of Sensitive Information into Log File","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.125761+00:00","url":"https://junglewise.ai/threats/cve-2007-0902-moinmoin-insertion-of-sensitive-information-into-log-file"},{"cve":"CVE-2007-0857","epss":0.0242,"slug":"cve-2007-0857-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities","title":"PYSEC-2026-678 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:20.067749+00:00","url":"https://junglewise.ai/threats/cve-2007-0857-moinmoin-multiple-cross-site-scripting-xss-vulnerabilities"},{"cve":"CVE-2004-1463","epss":0.0228,"slug":"cve-2004-1463-moinmoin-improper-privilege-management","title":"PYSEC-2026-674 - MoinMoin Improper Privilege Management","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:18.763018+00:00","url":"https://junglewise.ai/threats/cve-2004-1463-moinmoin-improper-privilege-management"},{"cve":"CVE-2004-1462","epss":0.016,"slug":"cve-2004-1462-moinmoin-improper-access-control","title":"PYSEC-2026-680 - MoinMoin Improper Access Control","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:18.707674+00:00","url":"https://junglewise.ai/threats/cve-2004-1462-moinmoin-improper-access-control"},{"cve":"CVE-2004-0708","epss":0.0177,"slug":"cve-2004-0708-moinmoin-allows-administrative-access","title":"PYSEC-2026-671 - MoinMoin allows administrative access","severity":"info","exploited":false,"published_at":"2026-07-02T14:13:18.303725+00:00","url":"https://junglewise.ai/threats/cve-2004-0708-moinmoin-allows-administrative-access"},{"cve":"CVE-2020-15275","cvss":3.1,"epss":0.0175,"slug":"cve-2020-15275-malicious-svg-attachment-causing-stored-xss-vulnerability","title":"PYSEC-2020-241 - MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malici","severity":"low","exploited":false,"published_at":"2020-11-11T16:15:00+00:00","url":"https://junglewise.ai/threats/cve-2020-15275-malicious-svg-attachment-causing-stored-xss-vulnerability"},{"cve":"CVE-2020-25074","cvss":3.1,"epss":0.0655,"slug":"cve-2020-25074-moinmoin-vulnerable-to-remote-code-execution-via-cache-action","title":"PYSEC-2020-67 - The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who ca","severity":"low","exploited":false,"published_at":"2020-11-10T17:15:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25074-moinmoin-vulnerable-to-remote-code-execution-via-cache-action"},{"cve":"CVE-2017-5934","cvss":3,"epss":0.0194,"slug":"cve-2017-5934-moderate-severity-vulnerability-that-affects-moin","title":"PYSEC-2018-47 - Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbi","severity":"low","exploited":false,"published_at":"2018-10-15T19:29:00+00:00","url":"https://junglewise.ai/threats/cve-2017-5934-moderate-severity-vulnerability-that-affects-moin"},{"cve":"CVE-2016-9119","cvss":3,"epss":0.0146,"slug":"cve-2016-9119-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2017-20 - Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbit","severity":"low","exploited":false,"published_at":"2017-01-30T22:59:00+00:00","url":"https://junglewise.ai/threats/cve-2016-9119-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2016-7146","cvss":3,"epss":0.012,"slug":"cve-2016-7146-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2016-30 - MoinMoin 1.9.8 allows remote attackers to conduct \"JavaScript injection\" attacks by using the \"page creation or crafted URL\" approach, relat","severity":"low","exploited":false,"published_at":"2016-11-10T17:59:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7146-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2016-7148","cvss":3,"epss":0.0119,"slug":"cve-2016-7148-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2016-31 - MoinMoin 1.9.8 allows remote attackers to conduct \"JavaScript injection\" attacks by using the \"page creation\" approach, related to a \"Cross","severity":"low","exploited":false,"published_at":"2016-11-10T17:59:00+00:00","url":"https://junglewise.ai/threats/cve-2016-7148-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2012-6080","cvss":3.1,"epss":0.0405,"slug":"cve-2012-6080-moinmoin-directory-traversal-vulnerability","title":"PYSEC-2013-5 - Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 thro","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6080-moinmoin-directory-traversal-vulnerability"},{"cve":"CVE-2012-6082","cvss":3.1,"epss":0.0211,"slug":"cve-2012-6082-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2013-23 - Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject ar","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6082-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2012-6081","cvss":3.1,"epss":0.3079,"slug":"cve-2012-6081-moinmoin-multiple-unrestricted-file-upload-vulnerabilities","title":"PYSEC-2013-6 - Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) act","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6081-moinmoin-multiple-unrestricted-file-upload-vulnerabilities"},{"cve":"CVE-2012-6495","cvss":3.1,"epss":0.1871,"slug":"cve-2012-6495-moinmoin-multiple-vulnerable-to-directory-traversal","title":"PYSEC-2013-7 - Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6495-moinmoin-multiple-vulnerable-to-directory-traversal"},{"cve":"CVE-2012-4404","cvss":3.1,"epss":0.0211,"slug":"cve-2012-4404-moinmoin-improper-access-control","title":"PYSEC-2012-10 - security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as \"All,\" \"Kno","severity":"low","exploited":false,"published_at":"2012-09-10T22:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-4404-moinmoin-improper-access-control"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"nltk (PyPI)","slug":"nltk","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/nltk"},{"name":"picklescan (PyPI)","slug":"picklescan","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/picklescan"},{"name":"openbabel (PyPI)","slug":"openbabel","vulnerabilities":48,"url":"https://junglewise.ai/threats/technologies/openbabel"},{"name":"apache-superset (PyPI)","slug":"apache-superset","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/apache-superset"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"weblate (PyPI)","slug":"weblate","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/weblate"},{"name":"mcp-atlassian (PyPI)","slug":"mcp-atlassian","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/mcp-atlassian"},{"name":"crawl4ai (PyPI)","slug":"crawl4ai","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/crawl4ai"},{"name":"opencv-contrib-python (PyPI)","slug":"opencv-contrib-python","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/opencv-contrib-python"}],"technology":{"hub":true,"name":"moin (PyPI)","slug":"moin","vendor":{"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/moin"},"most_severe":[{"cve":"CVE-2012-6081","cvss":3.1,"epss":0.3079,"slug":"cve-2012-6081-moinmoin-multiple-unrestricted-file-upload-vulnerabilities","title":"PYSEC-2013-6 - Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) act","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6081-moinmoin-multiple-unrestricted-file-upload-vulnerabilities"},{"cve":"CVE-2012-6495","cvss":3.1,"epss":0.1871,"slug":"cve-2012-6495-moinmoin-multiple-vulnerable-to-directory-traversal","title":"PYSEC-2013-7 - Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6495-moinmoin-multiple-vulnerable-to-directory-traversal"},{"cve":"CVE-2020-25074","cvss":3.1,"epss":0.0655,"slug":"cve-2020-25074-moinmoin-vulnerable-to-remote-code-execution-via-cache-action","title":"PYSEC-2020-67 - The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who ca","severity":"low","exploited":false,"published_at":"2020-11-10T17:15:00+00:00","url":"https://junglewise.ai/threats/cve-2020-25074-moinmoin-vulnerable-to-remote-code-execution-via-cache-action"},{"cve":"CVE-2012-6080","cvss":3.1,"epss":0.0405,"slug":"cve-2012-6080-moinmoin-directory-traversal-vulnerability","title":"PYSEC-2013-5 - Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 thro","severity":"low","exploited":false,"published_at":"2013-01-03T01:55:00+00:00","url":"https://junglewise.ai/threats/cve-2012-6080-moinmoin-directory-traversal-vulnerability"},{"cve":"CVE-2009-4762","cvss":3.1,"epss":0.03,"slug":"cve-2009-4762-moinmoin-improper-access-control-vulnerability","title":"PYSEC-2010-13 - MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchic","severity":"low","exploited":false,"published_at":"2010-03-29T20:30:00+00:00","url":"https://junglewise.ai/threats/cve-2009-4762-moinmoin-improper-access-control-vulnerability"},{"cve":"CVE-2010-2487","cvss":3.1,"epss":0.0268,"slug":"cve-2010-2487-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2010-16 - Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote a","severity":"low","exploited":false,"published_at":"2010-08-05T13:22:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2487-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2010-2970","cvss":3.1,"epss":0.0255,"slug":"cve-2010-2970-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2010-18 - Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or","severity":"low","exploited":false,"published_at":"2010-08-05T13:22:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2970-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2010-2969","cvss":3.1,"epss":0.0255,"slug":"cve-2010-2969-moinmoin-cross-site-scripting-in-multiple-actions","title":"PYSEC-2010-17 - Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject","severity":"low","exploited":false,"published_at":"2010-08-05T13:22:00+00:00","url":"https://junglewise.ai/threats/cve-2010-2969-moinmoin-cross-site-scripting-in-multiple-actions"},{"cve":"CVE-2011-1058","cvss":3.1,"epss":0.0254,"slug":"cve-2011-1058-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2011-6 - Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils","severity":"low","exploited":false,"published_at":"2011-02-22T18:00:00+00:00","url":"https://junglewise.ai/threats/cve-2011-1058-moinmoin-cross-site-scripting-xss-vulnerability"},{"cve":"CVE-2009-1482","cvss":3.1,"epss":0.025,"slug":"cve-2009-1482-moinmoin-cross-site-scripting-xss-vulnerability","title":"PYSEC-2009-6 - Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject a","severity":"low","exploited":false,"published_at":"2009-04-29T18:30:00+00:00","url":"https://junglewise.ai/threats/cve-2009-1482-moinmoin-cross-site-scripting-xss-vulnerability"}],"generated_at":"2026-09-26T13:07:00.120236+00:00"}