node-tmp vulnerabilities (Debian)

2 vulnerabilities.

• node-tmp Debian tmp: Path Traversal via unsanitized prefix/postfix enables directory escape CVE-2026-44705 Fix available 7.7 HighMay 27, 2026
• node-tmp Debian tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter CVE-2025-54798 Fix available 2.5 LowSeptember 2, 2020