CVE-2026-94185

CVE-2026-94185 is a path traversal vulnerability in nvm (Node Version Manager) affecting versions before 0.40.8 . The function nvm_alias() concatenates a requested version or alias name onto $NVM_DIR/alias and reads the result with no containment check , so a name containing a .. component escape...