Node Version Manager vulnerabilities

1 known vulnerability in Node Version Manager from Openjsf. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  nvm: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-10796Jun 4, 2026Nvm-shEPSS 5%

  nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror. Commands such as `nvm install` read the available versions from the mirror's index.tab and use the selected version, wit