VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jan 13, 2023· Updated Jun 17, 2026

CVE-2021-46872

CVE-2021-46872

Description

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • nim-lang/Nim
    cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*
    Range: <1.6.2
  • nim-lang/Nimforum
    cpe:2.3:a:nim-lang:nimforum:*:*:*:*:*:nim:*:*
    Range: <2.2.0
  • Nim/Nimdescription
  • Nim/Nimllm-fuzzy
    Range: <1.6.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.