Nim-lang
Nim-lang NIM: vulnerabilidades y CVE
Nim-lang NIM tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-46872 | Media (6.1) | 0.54% | — | 13 ene 2023 | An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim… |
| CVE-2021-29495 | Alta (7.5) | 0.49% | — | 7 may 2021 | Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a… |
| CVE-2021-21374 | Alta (8.1) | 1.0% | — | 26 mar 2021 | Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the… |
| CVE-2021-21373 | Media (5.9) | 1.2% | — | 26 mar 2021 | Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls… |
| CVE-2021-21372 | Alta (8.8) | 3.6% | — | 26 mar 2021 | Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An… |
| CVE-2020-15690 | Crítica (9.8) | 3.2% | — | 30 ene 2021 | In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. |
| CVE-2020-15694 | Alta (7.5) | 2.3% | — | 14 ago 2020 | In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get().contentLength() does not raise any error if a malicious server provides a negative… |
| CVE-2020-15693 | Media (6.5) | 2.0% | — | 14 ago 2020 | In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL. An injection is possible if the attacker controls any part of the URL provided in a call (such as httpClient.get or… |
| CVE-2020-15692 | Crítica (9.8) | 4.2% | — | 14 ago 2020 | In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser. This argument can be a local file path that will be opened in the default explorer. An attacker can pass one… |