CVE-2026-121746

A flaw was found in Node Version Manager nvm. When saving a version configuration, nvm follows symbolic links without verifying whether the target file resides outside the working directory. By convincing a user to execute save commands within a malicious repository containing a crafted symbolic...