agentprime: nvmEvery new CVE for nvm.https://agentprime.io/CVE-2026-121746: nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can writehttps://agentprime.io/advisories/CVE-2026-121746/https://agentprime.io/advisories/CVE-2026-121746/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:31:57 GMTCVECVE-2026-121749: nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local fileshttps://agentprime.io/advisories/CVE-2026-121749/https://agentprime.io/advisories/CVE-2026-121749/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:31:15 GMTCVECVE-2026-121747: nvm prints the contents of any readable file through a symlinked .nvmrchttps://agentprime.io/advisories/CVE-2026-121747/https://agentprime.io/advisories/CVE-2026-121747/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:30:32 GMTCVECVE-2026-121748: nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writablehttps://agentprime.io/advisories/CVE-2026-121748/https://agentprime.io/advisories/CVE-2026-121748/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:29:25 GMTCVECVE-2026-121750: nvm install --offline installs a cached tarball that previously failed checksum verificationhttps://agentprime.io/advisories/CVE-2026-121750/https://agentprime.io/advisories/CVE-2026-121750/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:28:43 GMTCVECVE-2026-121745: nvm exposes NVM_AUTH_HEADER to other local users on the curl/wget command linehttps://agentprime.io/advisories/CVE-2026-121745/https://agentprime.io/advisories/CVE-2026-121745/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:28:03 GMTCVECVE-2026-121751: nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliaseshttps://agentprime.io/advisories/CVE-2026-121751/https://agentprime.io/advisories/CVE-2026-121751/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:26:57 GMTCVECVE-2026-118905: nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sedhttps://agentprime.io/advisories/CVE-2026-118905/https://agentprime.io/advisories/CVE-2026-118905/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 05:22:35 GMTCVECVE-2026-94185: nvm alias resolution follows `..` and discloses files outside $NVM_DIR/aliashttps://agentprime.io/advisories/CVE-2026-94185/https://agentprime.io/advisories/CVE-2026-94185/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 02:27:00 GMTCVECVE-2026-15921: nvm path traversal via a malicious mirror's LTS codename writes outside the alias directoryhttps://agentprime.io/advisories/CVE-2026-15921/https://agentprime.io/advisories/CVE-2026-15921/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 21:16:46 GMTCVECVE-2026-10796: nvm executes commands from a malicious Node.js mirror's version stringshttps://agentprime.io/advisories/CVE-2026-10796/https://agentprime.io/advisories/CVE-2026-10796/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 17:02:23 GMTCVECVE-2026-1665: Command Injection in nvm via NVM_AUTH_HEADER in wget code pathhttps://agentprime.io/advisories/CVE-2026-1665/https://agentprime.io/advisories/CVE-2026-1665/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 23:04:05 GMTCVE