raszi Summary

Latest vulnerabilities published by raszi

JSON RSS CSV 🔔 Create Alert Trigger

11 June 2026

tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template
CVE-2026-49982
RasziNode-tmp8.2HIGH
tmp: Path Traversal via unsanitized prefix/postfix enables directory escape
CVE-2026-44705
RasziNode-tmp7.7HIGH

7 August 2025

Arbitrary File Write Vulnerability in Node.js Temporary File Creator
CVE-2025-54798
RasziNode-tmp2.5LOW