{"action":"Upgrade moin to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"1.9"}],"component":"moin","cve_ids":["CVE-2010-0667"],"ecosystem":"PyPI","epss":0.01869,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-876c-qmcf-cxv6","id":"tcs_01M5KG5A2QDG0DJP2P2MRS4XZZ","modified_at":"2026-06-10T17:02:22.031338281Z","published_at":"2010-02-26T19:30:00Z","references":["https://osv.dev/vulnerability/PYSEC-2010-14","http://www.openwall.com/lists/oss-security/2010/01/21/6","http://moinmo.in/SecurityFixes","http://secunia.com/advisories/38242","http://hg.moinmo.in/moin/1.9/rev/9d8e7ce3c3a2","http://www.openwall.com/lists/oss-security/2010/02/15/2","http://marc.info/?l=oss-security&m=126625972814888&w=2","http://moinmo.in/MoinMoinChat/Logs/moin-dev/2010-01-18","http://hg.moinmo.in/moin/1.9/rev/04afdde50094","http://marc.info/?l=oss-security&m=126676896601156&w=2","http://hg.moinmo.in/moin/1.9/raw-file/1.9.1/docs/CHANGES","https://github.com/advisories/GHSA-876c-qmcf-cxv6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2010-14","url":"https://osv.dev/vulnerability/PYSEC-2010-14"}],"summary":"MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se"}