https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:08:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373216 EUVD-2026-373216 https://cve.radiocsirt.org/vuln/euvd-2026-373216 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94185 <p>nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and read the result with no containment check, so a name containing a `..` component escaped the alias directory; under the default layout an alias such as `../../.npmrc` resolves to a file in the user&#39;s home directory. nvm_print_alias_file() then emits every non-comment, non-empty line of whatever was opened. A version string taken from an untrusted .nvmrc reaches this path, so a developer who runs `nvm use`, `nvm install`, or `nvm which` inside an attacker-supplied repository discloses the first non-comment line of an arbitrary file readable by that user, in the resulting &#34;is not yet installed&#34; error message. A user-supplied `nvm alias &lt;traversing-name&gt;` discloses every non-comment line of the target file. There is no integrity or availability impact, and no command execution on this path.</p> <p>nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that directory and read the result with no containment check, so a name containing a `..` component escaped the alias directory; under the default layout an alias such as `../../.npmrc` resolves to a file in the user&#39;s home directory. nvm_print_alias_file() then emits every non-comment, non-empty line of whatever was opened. A version string taken from an untrusted .nvmrc reaches this path, so a developer who runs `nvm use`, `nvm install`, or `nvm which` inside an attacker-supplied repository discloses the first non-comment line of an arbitrary file readable by that user, in the resulting &#34;is not yet installed&#34; error message. A user-supplied `nvm alias &lt;traversing-name&gt;` discloses every non-comment line of the target file. There is no integrity or availability impact, and no command execution on this path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94185