Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
nim-lang records in CISA KEVNo nim-lang vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
In Nim 1.2.4, the standard library browsers mishandles the URL argument to browsers.openDefaultBrowser.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04205 · Published 2020-08-14 · No fix listed CWE-88
Priority MEDIUM 48
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03219 · Published 2021-01-30 · No fix listed CWE-74
Priority MEDIUM 44
Nimble is a package manager for the Nim programming language.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03618 · Published 2021-03-26 · Fixed in 1.2.10, 1.4.4 CWE-20
Priority LOW 37
Nimble is a package manager for the Nim programming language.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0104 · Published 2021-03-26 · Fixed in 1.2.10, 1.4.4 CWE-348
Priority LOW 37
In Nim 1.2.4, the standard library httpClient fails to properly validate the server response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02331 · Published 2020-08-14 · No fix listed CWE-20
Priority LOW 35
Nimble is a package manager for the Nim programming language.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01155 · Published 2021-03-26 · Fixed in 1.2.10, 1.4.4 CWE-348
Priority LOW 33
Nim is a statically typed compiled systems programming language.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00491 · Published 2021-05-07 · Fixed in 1.4.2 CWE-295
Priority LOW 33
In Nim 1.2.4, the standard library httpClient is vulnerable to a CR-LF injection in the target URL.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02131 · Published 2020-08-14 · No fix listed CWE-74
Priority LOW 28
An issue was discovered in Nim before 1.6.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00562 · Published 2023-01-13 · No fix listed CWE-79
Open these records in search →