Vulnerabilities in raszi

3 results

CVE-2026-49982HIGHtmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/templateEPSS 0.5%CVE-2026-44705HIGHtmp: Path Traversal via unsanitized prefix/postfix enables directory escapeEPSS 0.4%CVE-2025-54798LOWtmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameterEPSS 0.3%