raszi node-tmp vulnerabilities
3 published CVEs name raszi node-tmp among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49982
tmp: Type-confusion bypass of _assertPath in [email protected] allows path traversal via non-string prefix/postfix/template
raszi · node-tmp
High8.2 - CVE-2026-44705
tmp: Path Traversal via unsanitized prefix/postfix enables directory escape
raszi · node-tmp
High7.7 - CVE-2025-54798
tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter
raszi · node-tmp
Low2.5