Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-29495
5.9
MEDIUMCVSS v3
Published
May 7, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented.
nim-lang/Nim
GitHubNim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).
GitHubNim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).< 1.4.2NVD