VulertSecurity VulertSecurity

Vulnerability Database · PyPI · moin · Version

moin 1.9.10

1.9.10 is affected by 17 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 1.9.11.

Critical 0 High 1 Medium 8 Low 0 Unrated 8

All moin versions & vulnerabilities → Search the database for this package →
Released 09 Sep 2018 Licence non-standard Also known from other sources 5 Newer releases 22 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

moin 1.9.10 vulnerabilities

17 vulnerabilities cover moin 1.9.10. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2020-25074: Remote Code Execution via Cache Action in MoinMoin 8.8 high 1.9.11 11 Nov 2020
CVE-2020-15275: MoinMoin Wiki - Malicious SVG Attachment Stored XSS Vulnerability 8.7 medium 1.9.11 11 Nov 2020
CVE-2010-2969: MoinMoin Cross-Site Scripting (XSS) Vulnerability 6.1 medium No fix published 17 May 2022
CVE-2010-2487: MoinMoin Cross-site Scripting (XSS) vulnerability 6.1 medium No fix published 17 May 2022
CVE-2008-1099: MoinMoin Improper Access Control Vulnerability N/A unrated No fix published 02 Jul 2026
CVE-2008-1098: MoinMoin Package Multiple Cross-Site Scripting Vulnerabilities N/A unrated No fix published 02 Jul 2026
CVE-2008-0781: MoinMoin XSS Vulnerabilities in AttachFile.py N/A unrated No fix published 02 Jul 2026
CVE-2008-0782: MoinMoin Directory Traversal Vulnerability N/A unrated No fix published 02 Jul 2026
MoinMoin Improper Access Control Vulnerability in moin N/A medium No fix published 01 May 2022
MoinMoin Multiple Cross-Site Scripting (XSS) Vulnerabilities N/A medium No fix published 01 May 2022
MoinMoin Directory Traversal Vulnerability in moin N/A medium No fix published 01 May 2022
MoinMoin Cross-site scripting (XSS) vulnerability N/A medium No fix published 01 May 2022
MoinMoin Multiple Cross-Site Scripting (XSS) Vulnerabilities N/A medium No fix published 01 May 2022
CVE-2020-15275: MoinMoin SVG File Upload Remote Code Execution N/A unrated 31de9139d0aabc171e94032168399b4a0b2a88a2 11 Nov 2020
CVE-2020-25074: Directory Traversal Vulnerability in MoinMoin N/A unrated 1.9.11 10 Nov 2020
CVE-2017-5934: Cross-site scripting (XSS) vulnerability in MoinMoin N/A unrated 70955a8eae091cc88fd9a6e510177e70289ec024 15 Oct 2018
CVE-2008-6548: MoinMoin 1.6.1 - Unauthorized File Read N/A unrated No fix published 30 Mar 2009

Looking for another version, or everything Vulert holds for moin?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About moin 1.9.10

Is moin 1.9.10 vulnerable?

Yes. 17 vulnerabilities in the Vulert database cover moin 1.9.10: 0 critical, 1 high, 8 medium and 0 low, plus 8 not yet rated. The upgrade Vulert recommends is 1.9.11, and each entry above names the fixed version to move to.

Which version of moin should I use instead of 1.9.10?

1.9.11 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 1.9.10 the latest release of moin?

No. 1.9.10 was published 09 Sep 2018, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor moin for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the moin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.