Nim-lang vulnerabilities

Products

• Nim 9
• Security 4
• Nimforum 2

Newest

• nim-lang nim, nimforum +1 more An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used... CVE-2021-46872 Fix available 6.1 MediumJanuary 13, 2023
• nim-lang nimforum, docutils +1 more Nim's rst parser sandboxed mode allows include which can embed any local file CVE-2022-23602 7.7 HighFebruary 1, 2022
• nim-lang A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to... CVE-2020-23171 5.5 MediumAugust 10, 2021
• nim-lang nim, embysupport security +1 more Nim stdlib httpClient does not validate peer certificates by default CVE-2021-29495 Fix available 5.9 MediumMay 7, 2021
• nim-lang nim, embysupport security +1 more Nimble falls back to insecure http url when fetching packages CVE-2021-21373 Fix available 7.5 HighMarch 26, 2021
• nim-lang nim, embysupport security +1 more Nimble fails to validate certificates due to insecure httpClient defaults CVE-2021-21374 Fix available 8.1 HighMarch 26, 2021
• nim-lang nim, embysupport security +1 more Nimble arbitrary code execution for specially crafted package metadata CVE-2021-21372 Fix available 8.3 HighMarch 26, 2021
• nim-lang nim Security update for nim CVE-2020-15690 Fix available 9.8 CriticalJanuary 30, 2021
• nim-lang nim In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For... CVE-2020-15694 Fix available 7.5 HighAugust 14, 2020
• nim-lang nim Security update for nim CVE-2020-15693 Fix available 6.5 MediumAugust 14, 2020
• nim-lang nim Security update for nim CVE-2020-15692 Fix available 9.8 CriticalAugust 14, 2020