{"action":"Upgrade moin to 1.5.8 or later.","affected":[{"fixed":"1.5.8","introduced":"0"}],"component":"moin","cve_ids":["CVE-2007-2637"],"ecosystem":"PyPI","epss":0.01486,"exploited":false,"fixed_versions":["1.5.8"],"ghsa_id":"GHSA-cmg7-xr2j-4r9v","id":"tcs_01M5KHCV2ZH4QMGRPR20CHJAAZ","modified_at":"2026-07-06T08:00:44.815511720Z","published_at":"2026-07-02T14:13:20.287938Z","references":["https://osv.dev/vulnerability/PYSEC-2026-675","https://nvd.nist.gov/vuln/detail/CVE-2007-2637","https://exchange.xforce.ibmcloud.com/vulnerabilities/34474","https://moinmo.in/MoinMoinRelease1.5/CHANGES","http://osvdb.org/36269","http://secunia.com/advisories/25208","http://secunia.com/advisories/29262","http://www.debian.org/security/2008/dsa-1514","http://www.ubuntu.com/usn/usn-458-1","https://pypi.org/project/moin","https://github.com/advisories/GHSA-cmg7-xr2j-4r9v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-675","url":"https://osv.dev/vulnerability/PYSEC-2026-675"}],"summary":"MoinMoin Improper ACL handling for calendars and includes"}