`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
34,717 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
33,719 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

GHSA-7c78-jf6q-g5cm CVE-2026-49982 HIGH published about 1 month ago • updated about 15 hours ago

### Summary The `_assertPath` guard added to `tmp@0.2.6` rejects only string values that contain the substring `..`. It is bypassed when `prefix`,...

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

GHSA-ph9p-34f9-6g65 CVE-2026-44705 HIGH published about 2 months ago • updated 14 days ago

### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data ...

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published 12 months ago • updated 14 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

build(deps): bump the all-monorepo-security group across 3 directories with 20 updates

sentry-demos/empower #1596

0.2.5 → 0.2.7 Patch PR

Closed 6 days ago 2 comments

Bump the npm_and_yarn group across 6 directories with 14 updates

pdragy/trillium #139

0.2.5 → 0.2.7 Patch PR

Closed 23 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

nssuwan186-dev/qwen-code #28

0.2.5 → 0.2.7 Patch PR

Closed 30 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

milliorn/portfolio #259

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

Bump the npm_and_yarn group across 10 directories with 18 updates

nssuwan186-dev/firebase-tools #79

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

malektiktokty-cell/Acode #3

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 19 updates

dporkka/budibase #18

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 32 directories with 8 updates

hashim21223445/angular #329

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

build(deps): bump the npm_and_yarn group across 28 directories with 12 updates

hashim21223445/angular #327

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

lhy8888/uptime #83

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

BenMakesGames/PoppySeedPets #298

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 5 updates

advanced-security/codeql-sap-js #384

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 8 updates

rudderlabs/rudder-sdk-js #3067

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

Bump the npm_and_yarn group across 2 directories with 2 updates

SimenB/apollo-client #1720

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump tmp from 0.2.6 to 0.2.7

Shironex/shiroani #161

0.2.6 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /vscode-extension

Dmdv/design-extract #3

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 24 updates

cosmiccareer/terminai #23

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 17 updates

dporkka/budibase #17

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 15 updates

KNOCKSSTUDiOS-labs/firebase-framework-tools #14

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 15 updates

XavierMP14/storybook #43

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 16 updates

dporkka/budibase #16

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 3 directories with 13 updates

Takeichi121/CBH-1 #8

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 7 updates

sc-sobiyasivakumar/xmcloud-starter-js #278

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 19 updates

Dev-moe-kyawaung/firebase-tools #7

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 24 updates

HarleyCoops/gemini-cli #13

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 3 comments

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

gidotencate/padlock #17

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 16 updates

Domimueller85/subgraphs #1

0.2.1 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump tmp from 0.2.5 to 0.2.7

AISecurityAssurance/ai-sec-ally #5

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

lhy8888/uptime #73

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

lhy8888/uptime #72

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

jpj5000-oek/gemini-cli #1

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

build(deps): bump tmp from 0.2.5 to 0.2.7

modernweb-dev/rocket #467

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 5 updates

mr-samani/ngx-knob #20

0.2.3 → 0.2.7 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

stevewithington/cline #4

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 20 updates

beauNate/happier #3

0.2.5 → 0.2.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 25 updates

cosmiccareer/terminai #17

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump the minor-and-patch group across 1 directory with 8 updates

jmars319/vaexcore-console #6

0.2.6 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump tmp from 0.2.3 to 0.2.7

Automattic/simplenote-electron #3371

0.2.3 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump tmp from 0.2.1 to 0.2.7 in /packages/discovery-provider/plugins/notifications

oshkoshbagoshh/audius-protocol #143

0.2.1 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

gagneet/firefly-iii #12

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 3 updates

Vinidrummmm/vercel #16

0.2.1 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 16 directories with 4 updates

Surfndez/wormhole #38

0.2.1 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 4 updates

advanced-security/codeql-sap-js #374

0.2.5 → 0.2.6 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 12 directories with 14 updates

AnnaProDev/fork-commit-merge #47

0.2.1 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates

rooch-network/rooch #4006

0.2.4 → 0.2.6 Patch PR

Closed about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 16 directories with 11 updates

bluluvinn/genkit #50

0.2.3 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump tmp from 0.2.5 to 0.2.7

Joshpolansky/LoomUI #3

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump tmp from 0.2.5 to 0.2.7

the-long-ride/vscode-extension-markdown-them #2

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Bump tmp from 0.2.5 to 0.2.7 in the npm_and_yarn group across 1 directory

msjeps/edt-eps #4

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump tmp from 0.2.5 to 0.2.7

AkiraW5/LoreKeeper #23

0.2.5 → 0.2.7 Patch PR

Closed about 2 months ago 1 comment

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 2 years ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 31,222 (89.9%)

Merged 1,952 (5.6%)

Closed 1,539 (4.4%)

PR Types

Minor 964 (2.8%)

Patch 6,861 (19.8%)

Removal 26,538 (76.4%)