nvm-sh Summary

Latest vulnerabilities published by nvm-sh

JSON RSS CSV 🔔 Create Alert Trigger

4 June 2026

nvm executes commands from a malicious Node.js mirror's version strings
CVE-2026-10796
Nvm-shNvm7.5HIGH

29 January 2026

Command Injection Vulnerability in Node Version Manager by NVM
CVE-2026-1665
Nvm-shNvm5.4MEDIUM