TI-2022-07655 CVE-2022-23602
Nim's rst parser sandboxed mode allows include which can embed any local file
Priority HIGH 68
Nimforum is a lightweight alternative to Discourse written in Nim.
nim-lang
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
nim-lang records in CISA KEVNo nim-lang vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2020-12364 CVE-2020-15692
In Nim 1.2.4, the standard library browsers mishandles the URL argument to…
Priority MEDIUM 49
In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser.
TI-2020-12363 CVE-2020-15690
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a…
Priority MEDIUM 48
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.
Priority MEDIUM 44
Nimble is a package manager for the Nim programming language.
TI-2021-04473 CVE-2021-21374
Nimble fails to validate certificates due to insecure httpClient defaults
Priority LOW 37
Nimble is a package manager for the Nim programming language.
TI-2020-12366 CVE-2020-15694 · GHSA-mwjr-9xqh-r2f5
In Nim 1.2.4, the standard library httpClient fails to properly validate the server…
Priority LOW 37
In Nim 1.2.4, the standard library httpClient fails to properly validate the server response.
Priority LOW 35
Nimble is a package manager for the Nim programming language.
Priority LOW 33
Nim is a statically typed compiled systems programming language.
TI-2020-12365 CVE-2020-15693
In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the…
Priority LOW 33
In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL.
TI-2021-21541 CVE-2021-46872 · GHSA-6fm4-9v93-v7gg
An issue was discovered in Nim before 1.6.2.
Priority LOW 28
An issue was discovered in Nim before 1.6.2.
TI-2020-14473 CVE-2020-23171 · GHSA-3phc-v747-949q
A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write…
Priority LOW 26
A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.