NV
Product
nvm
5
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 2Low 1
Watch
Add nvm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10796 | 7.5 | Jun 4 | nvm executes commands from a malicious Node.js mirror's version strings Affected: through 0.40.4 |
| CVE-2026-118905 New | 7.0 | Oct 29 | nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed Affected: 0.31.2 before 0.40.6 |
Showing 2