nim-lang

Products

ProductCVEsExploitedLatest
security4–May 7, 2021

Exploited and recent CVEs

  • CVE-2021-29495 Medium 5.9 Nim stdlib httpClient does not validate peer certificates by default 0.5%
  • CVE-2021-21373 High 7.5 Nimble falls back to insecure http url when fetching packages 1.2%
  • CVE-2021-21374 High 8.1 Nimble fails to validate certificates due to insecure httpClient defaults 1.0%
  • CVE-2021-21372 High 8.3 Nimble arbitrary code execution for specially crafted package metadata 3.6%