Skip to content
OpenAdvisories

Package · Debian

nim

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2021-21373

    Nimble falls back to insecure http url when fetching packages

    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.ni…

    nim-lang security nim nim Debian Ubuntu
  • High 8.1
    CVE-2021-21374

    Nimble fails to validate certificates due to insecure httpClient defaults

    Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setti…

    nim-lang security nim nim Debian Ubuntu
  • High 8.3
    CVE-2021-21372

    Nimble arbitrary code execution for specially crafted package metadata

    Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the …

    nim-lang security nim nim Debian Ubuntu