{"action":"Upgrade moin to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"1.5"}],"component":"moin","cve_ids":["CVE-2008-0780"],"ecosystem":"PyPI","epss":0.0175,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-53wj-6m7w-j6mj","id":"tcs_01M5KHCSBT93XPCPDRDGPNP3XD","modified_at":"2026-07-06T08:00:39.330464727Z","published_at":"2026-07-02T14:13:20.523188Z","references":["https://osv.dev/vulnerability/PYSEC-2026-667","https://nvd.nist.gov/vuln/detail/CVE-2008-0780","https://bugzilla.redhat.com/show_bug.cgi?id=432747","https://usn.ubuntu.com/716-1","https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00726.html","https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00752.html","http://hg.moinmo.in/moin/1.5/rev/2f952fa361c7","http://hg.moinmo.in/moin/1.6/rev/9f4bdc7ef80d","http://secunia.com/advisories/28987","http://secunia.com/advisories/29010","http://secunia.com/advisories/29262","http://secunia.com/advisories/29444","http://secunia.com/advisories/33755","http://www.debian.org/security/2008/dsa-1514","http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","http://www.securityfocus.com/bid/27904","http://www.vupen.com/english/advisories/2008/0569/references","https://pypi.org/project/moin","https://github.com/advisories/GHSA-53wj-6m7w-j6mj"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-667","url":"https://osv.dev/vulnerability/PYSEC-2026-667"}],"summary":"MoinMoin Cross-site scripting (XSS) vulnerability"}