CyberSecBulletin

Raszi vulnerabilities

We track 2 vulnerabilities in Raszi products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2026.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Raszi vulnerabilities

  • 8.2 High severity

    tmp is a temporary file and directory creator for node.js.

    CVE-2026-49982Raszi

    tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is bypassed when prefix, postfix, or template is supplied as a non-string value (Array,

  • 8.2 High severity

    node-tmp: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-44705Raszi

    tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By