VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 13, 2023· Updated Apr 7, 2025

CVE-2021-46872

CVE-2021-46872

Description

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Nim/Nimdescription
  • Nim/Nimllm-create
    Range: <1.6.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.