Advisories · Technology
nim-lang security.
Every CVE that names nim-lang security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Nim stdlib httpClient does not validate peer certificates by default
- nim-lang security
- Weak cryptography or TLS
- CVSS 7.5 High
Nimble falls back to insecure http url when fetching packages
- nim-lang security
- CWE-348
- CVSS 8.1 High
Nimble fails to validate certificates due to insecure httpClient defaults
- nim-lang security
- CWE-348
- CWE-349
- CVSS 8.3 High
Nimble arbitrary code execution for specially crafted package metadata
- nim-lang security
- Other injection
- CWE-20