{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.5.8"}],"component":"moin","cve_ids":["CVE-2008-1098"],"ecosystem":"PyPI","epss":0.01818,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8fj9-pj4p-4vq7","id":"tcs_01M5KHCTKK9BBT5M2SM5KMTD76","modified_at":"2026-07-06T08:00:44.522741596Z","published_at":"2026-07-02T14:13:20.698066Z","references":["https://osv.dev/vulnerability/PYSEC-2026-672","https://nvd.nist.gov/vuln/detail/CVE-2008-1098","https://exchange.xforce.ibmcloud.com/vulnerabilities/41037","https://usn.ubuntu.com/716-1","https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00510.html","https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00538.html","http://hg.moinmo.in/moin/1.5/rev/4ede07e792dd","http://hg.moinmo.in/moin/1.5/rev/d0152eeb4499","http://moinmo.in/SecurityFixes","http://secunia.com/advisories/29262","http://secunia.com/advisories/29444","http://secunia.com/advisories/30031","http://secunia.com/advisories/33755","http://www.debian.org/security/2008/dsa-1514","http://www.gentoo.org/security/en/glsa/glsa-200803-27.xml","http://www.securityfocus.com/bid/28173","https://pypi.org/project/moin","https://github.com/advisories/GHSA-8fj9-pj4p-4vq7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-672","url":"https://osv.dev/vulnerability/PYSEC-2026-672"}],"summary":"MoinMoin Multiple cross-site scripting (XSS) vulnerabilities"}