Nimble · Nimble · CVE-2021-21372
**Name of the Vulnerable Software and Affected Versions**
Nim versions prior to 1.2.10
Nim versions prior to 1.4.4
**Description**
The issue concerns Nimble, a package manager for the Nim programming language. In affected versions, Nimble's doCmd can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the `packages.json` package list to trigger code execution.
**Recommendations**
For versions prior to 1.2.10, update to version 1.2.10 or later.
For versions prior to 1.4.4, update to version 1.4.4 or later.