nim

9 results · Feed

• Medium 6.1
  CVE-2021-46872

  An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other p…

  nim nim Debian Ubuntu
  Jan 13, 2023
• Medium 5.9
  CVE-2021-29495

  Nim stdlib httpClient does not validate peer certificates by default

  Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyM…

  nim-lang security nim nim Debian Ubuntu
  May 7, 2021
• High 7.5
  CVE-2021-21373

  Nimble falls back to insecure http url when fetching packages

  Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.ni…

  nim-lang security nim nim Debian Ubuntu
  Mar 26, 2021
• High 8.1
  CVE-2021-21374

  Nimble fails to validate certificates due to insecure httpClient defaults

  Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setti…

  nim-lang security nim nim Debian Ubuntu
  Mar 26, 2021
• High 8.3
  CVE-2021-21372

  Nimble arbitrary code execution for specially crafted package metadata

  Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the …

  nim-lang security nim nim Debian Ubuntu
  Mar 26, 2021
• Unscored —
  CVE-2020-15690

  In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline charact…

  nim nim Debian Ubuntu
  Jan 30, 2021
• Unscored —
  CVE-2020-15694

  In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.g…

  nim nim Debian Ubuntu
  Aug 14, 2020
• Unscored —
  CVE-2020-15693

  In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is pos…

  nim nim Debian Ubuntu
  Aug 14, 2020
• Unscored —
  CVE-2020-15692

  In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument c…

  nim nim Debian Ubuntu
  Aug 14, 2020