Threats Tagged 'cve-2026-15921'
View all threats tagged with 'cve-2026-15921'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-15921'
Click on any threat for detailed analysis and mitigation recommendations
0 Node Version Manager (nvm) versions 0.32.1 through 0.40.5 contain a path traversal vulnerability in commands that refresh remote LTS aliases, such as `nvm ls-remote` and `nvm install --lts`. This occurs because nvm uses the LTS codename from the node.js mirror as an alias filename without validating it, allowing a malicious mirror to cause files outside the intended directory to be overwritten. Exploitation requires use of a hostile mirror and running an affected command. Version 0.40.6 and later validate these codenames to prevent this issue. Join the discussion | CVE Database V5 | 07/15/2026, 21:16:46 UTC Added: 07/15/2026, 21:34:00 UTC |
Showing 1 to 1 of 1 result