nvm.sh Node Version Manager command injection vulnerability

A security vulnerability exists in nvm.sh versions 0.31.2 through 0.40.5. It arises because nvmls fails to properly escape backslashes within version strings when using the sed program to filter installed versions. Version strings containing or \ are interpreted as a sequence of ...; the rest of...