nvm-sh nvm

• CVE-2026-121746 Medium 5.5 nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write 0.2%
• CVE-2026-121749 Low 3.3 nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files 0.2%
• CVE-2026-121747 Medium 5.5 nvm prints the contents of any readable file through a symlinked .nvmrc 0.2%
• CVE-2026-121748 Low 3.6 nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writable 0.1%
• CVE-2026-121750 Low 3.1 nvm install --offline installs a cached tarball that previously failed checksum verification 0.1%
• CVE-2026-121745 Low 2.5 nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line 0.1%
• CVE-2026-121751 Low 3.1 nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases 0.2%
• CVE-2026-118905 High 7.0 nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed 0.1%
• CVE-2026-94185 Medium 5.5 nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias 0.2%
• CVE-2026-15921 Low 3.1 nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory 0.3%
• CVE-2026-10796 High 7.5 nvm executes commands from a malicious Node.js mirror's version strings 5.0%
• CVE-2026-1665 Medium 5.4 Command Injection in nvm via NVM_AUTH_HEADER in wget code path 0.8%