Log in Start free

raszi

Products

ProductCVEsExploitedLatest
node-tmp3–Jun 11, 2026

Exploited and recent CVEs

  • CVE-2026-49982 High 8.2 tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template 0.5%
  • CVE-2026-44705 High 7.7 tmp: Path Traversal via unsanitized prefix/postfix enables directory escape 0.4%
  • CVE-2025-54798 Low 2.5 tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter 0.4%