Nvm-Sh

4 CVEs across 1 Nvm-Sh products. Browse Nvm-Sh vulnerabilities, severities, and proof-of-concept exploits.

Nvm-Sh products with known CVEs

ProductCVEs
Nvm4
Nvm-Sh CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-94185Medium5.52026-09-21nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto th…
CVE-2026-15921Low3.12026-07-15Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.1 through 0.40.5, `nvm ls-remote` (and…
CVE-2026-10796High7.52026-06-04nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror. Commands such as `n…
CVE-2026-16652026-01-29A command injection vulnerability exists in nvm (Node Version Manager) versions 0.40.3 and below. The nvm_download() function uses eval to execute wget command…