<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nim-lang-security</title><description>Every new CVE for nim-lang-security.</description><link>https://agentprime.io/</link><item><title>CVE-2021-29495: Nim stdlib httpClient does not validate peer certificates by default</title><link>https://agentprime.io/advisories/CVE-2021-29495/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-29495/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 07 May 2021 15:15:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21373: Nimble falls back to insecure http url when fetching packages</title><link>https://agentprime.io/advisories/CVE-2021-21373/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21373/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Mar 2021 21:25:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21374: Nimble fails to validate certificates due to insecure httpClient defaults</title><link>https://agentprime.io/advisories/CVE-2021-21374/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21374/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Mar 2021 21:25:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-21372: Nimble arbitrary code execution for specially crafted package metadata</title><link>https://agentprime.io/advisories/CVE-2021-21372/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21372/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Mar 2021 21:20:15 GMT</pubDate><category>CVE</category></item></channel></rss>