What’s Vulnerable › Products

raszi node-tmp vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your raszi node-tmp version is affected

Latest raszi node-tmp vulnerabilities

• CVE-2026-49982 — tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template (CVSS 8.2)
• CVE-2026-44705 — tmp: Path Traversal via unsanitized prefix/postfix enables directory escape (CVSS 8.2)
• CVE-2025-54798 — tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter (CVSS 5.3)