Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-21372
8.3
HIGHCVSS v3
Published
March 26, 2021
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the packages.json package list to trigger code execution.
nim-lang/Nim
GitHubNim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).
GitHubNim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).< 1.2.10, >= 1.4.0, < 1.4.4NVD