LOW2.5npm
GHSA-52f5-9888-hmc6· CVE-2025-54798tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Modified: 9/10/2026
package
pkg:npm/tmp
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Modified: 9/10/2026
tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template
Modified: 9/10/2026
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
Modified: 9/10/2026