nvm vulnerabilities

CVEs whose affected-version data names the nvm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-94185Medium· 5.5

3d ago

nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias

nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and read the result with no containment check, so a name containi…

▾ Sunlitnvm-sh · nvmEPSS 0.29%via NVD