nvm.

nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write

• nvm
• Path traversal

nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files

• nvm
• Command injection

nvm prints the contents of any readable file through a symlinked .nvmrc

• nvm
• Path traversal
• Information disclosure

nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writable

• nvm
• Path traversal

nvm install --offline installs a cached tarball that previously failed checksum verification

• nvm
• CWE-459
• CWE-494

nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command line

• nvm
• CWE-214

nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases

• nvm
• Command injection
• CWE-20

nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed

• nvm
• Command injection
• Code injection

nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

• nvm
• Path traversal
• Information disclosure

nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory

• nvm
• Path traversal

nvm executes commands from a malicious Node.js mirror's version strings

• nvm
• Command injection

Command Injection in nvm via NVM_AUTH_HEADER in wget code path

• nvm
• Command injection
• Code injection