Cpe:2.3:a:node_version_manager:node_version_manager:*:*:*:*:*:*:*:*

Node Version Manager (nvm) versions 0.31.2 through 0.40.5 are vulnerable to command injection via malicious version strings due to improper sanitization in the nvm_ls function when invoked with tools like nvm use or automated shell hooks.