Openjsf Node Version Manager — known CVE vulnerabilities
Every CVE whose affected-product data names Openjsf Node Version Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2026-10796 — CVSS 7.5 (high): nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror…