nim-lang nim

Name: nim-lang nim
Brand: nim-lang

productUS

cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high3medium0low

updated 2026-10-26

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15692US	critical9.8	4.21% (91st)	—	no fix	2020-08-14	≤ 1.2.6
CVE-2021-21372US	high8.8	3.62% (89th)	—	1.4.4	2021-03-26	2 versions
CVE-2020-15690US	critical9.8	3.18% (88th)	—	1.2.6	2021-01-30	< 1.2.6
CVE-2020-15694US	high7.5	2.33% (83rd)	—	no fix	2020-08-14	≤ 1.2.6
CVE-2020-15693US	medium6.5	2.13% (82nd)	—	no fix	2020-08-14	≤ 1.2.6
CVE-2021-21373US	medium5.9	1.16% (67th)	—	1.4.4	2021-03-26	2 versions
CVE-2021-21374US	high8.1	1.04% (64th)	—	1.2.10	2021-03-26	2 versions
CVE-2021-46872US	medium6.1	0.56% (46th)	—	1.6.2	2023-01-13	< 1.6.2
CVE-2021-29495US	high7.5	0.49% (41st)	—	1.4.2	2021-05-07	< 1.4.2

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-348Use of Less Trusted Source2 CVEs
CWE-349Acceptance of Extraneous Untrusted Data With Trusted Data1 CVEs
CWE-599Missing Validation of OpenSSL Certificate1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.