CVE-2021-29495

Nim is a statically typed compiled systems programming language. In Nim standard library before 1.4.2, httpClient SSL/TLS certificate verification was disabled by default. Users can upgrade to version 1.4.2 to receive a patch or, as a workaround, set "verifyMode = CVerifyPeer" as documented.

• CWE-295
• CWE-295

• https://github.com/nim-lang/security/security/advisories/GHSA-9vqv-2jj9-7mqrThird Party Advisory
• https://github.com/nim-lang/security/security/advisories/GHSA-9vqv-2jj9-7mqrThird Party Advisory

Published

May 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29488SABnzbd is an open source binary newsreader. A vulnerability…5.3
• CVE-2021-29489Highcharts JS is a JavaScript charting library based on SVG.…5.4
• CVE-2021-29490Jellyfin is a free software media system that provides media…5.8
• CVE-2021-29491Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-29492Envoy is a cloud-native edge/middle/service proxy. Envoy doe…8.3
• CVE-2021-29493Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE ex…8.8
• CVE-2021-29499SIF is an open source implementation of the Singularity Cont…7.5
• CVE-2021-29500bubble fireworks is an open source java package relating to …7.5
• CVE-2021-29501Ticketer is a command based ticket system cog (plugin) for t…6.5
• CVE-2021-29502WarnSystem is a cog (plugin) for the Red discord bot. A vuln…6.5
• CVE-2021-29503HedgeDoc is a platform to write and share markdown. HedgeDoc…6.1
• CVE-2021-29504WP-CLI is the command-line interface for WordPress. An impro…7.4