Tmp vulnerabilities

2 known vulnerabilities in Tmp from Raszi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  tmp is a temporary file and directory creator for node.js.

  CVE-2026-49982Jun 11, 2026Raszi

  tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is bypassed when prefix, postfix, or template is supplied as a non-string value (Array,

• 8.2 High severity

  node-tmp: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-44705Jun 11, 2026Raszi

  tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By