CVE-2026-121745

Published 4 November 2026 · tracked since 5 November 2026

Description

Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.40.0 through 0.40.8, when `NVM_AUTH_HEADER` is set, `nvm_download` passes the credential to curl or wget as a `--header "Authorization: ..."` command-line argument. Process arguments

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-82894
• CVE-2026-81828
• CVE-2026-81816
• CVE-2026-81815
• CVE-2026-81808
• CVE-2026-71901 HIGH 8.1
• CVE-2026-66903 MEDIUM 6.5
• CVE-2026-84728 MEDIUM 5.4
• CVE-2026-84183 HIGH 8.8
• CVE-2026-83542 CRITICAL 9.8

→ Open the live CVE board · all tools