VYPR

Node Version Manager

by Fastify

CVEs (1)

  • CVE-2026-10796HigJun 4, 2026
    risk 0.42cvss 7.5epss 0.00

    nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror. Commands such as `nvm install` read the available versions from the mirror's index.tab and use the selected version, without sanitization,…