raszi node-tmp

• CVE-2026-49982 High 8.2 tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template 0.5%
• CVE-2026-44705 High 7.7 tmp: Path Traversal via unsanitized prefix/postfix enables directory escape 0.4%
• CVE-2025-54798 Low 2.5 tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter 0.4%