node-tmp vulnerabilities (Ubuntu)

3 vulnerabilities.

• node-tmp Ubuntu tmp: Type-confusion bypass of _assertPath in [email protected] allows path traversal via non-string prefix/postfix/template CVE-2026-49982 Fix available 8.2 HighJune 11, 2026
• node-tmp Ubuntu tmp: Path Traversal via unsanitized prefix/postfix enables directory escape CVE-2026-44705 Fix available 7.7 HighMay 27, 2026
• node-tmp Ubuntu tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter CVE-2025-54798 Fix available 2.5 LowSeptember 2, 2020