{"action":"Upgrade moin to 1.5.7 or later.","affected":[{"fixed":"1.5.7","introduced":"0"}],"component":"moin","cve_ids":["CVE-2007-0857"],"ecosystem":"PyPI","epss":0.02484,"exploited":false,"fixed_versions":["1.5.7"],"ghsa_id":"GHSA-m84w-vgwf-p893","id":"tcs_01M5KHCVJERVV1XBD4EDH02ZJ1","modified_at":"2026-07-06T08:00:43.480492817Z","published_at":"2026-07-02T14:13:20.067749Z","references":["https://osv.dev/vulnerability/PYSEC-2026-678","https://nvd.nist.gov/vuln/detail/CVE-2007-0857","https://exchange.xforce.ibmcloud.com/vulnerabilities/32377","http://moinmoin.wikiwikiweb.de/MoinMoinRelease1.5/CHANGES","http://osvdb.org/31871","http://osvdb.org/31872","http://osvdb.org/31873","http://secunia.com/advisories/24096","http://secunia.com/advisories/24117","http://www.osvdb.org/31874","http://www.securityfocus.com/bid/22506","http://www.ubuntu.com/usn/usn-421-1","http://www.vupen.com/english/advisories/2007/0553","https://pypi.org/project/moin","https://github.com/advisories/GHSA-m84w-vgwf-p893"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-678","url":"https://osv.dev/vulnerability/PYSEC-2026-678"}],"summary":"MoinMoin Multiple cross-site scripting (XSS) vulnerabilities"}