`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
34,717 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
33,719 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

GHSA-7c78-jf6q-g5cm CVE-2026-49982 HIGH published about 1 month ago • updated about 8 hours ago

### Summary The `_assertPath` guard added to `tmp@0.2.6` rejects only string values that contain the substring `..`. It is bypassed when `prefix`,...

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

GHSA-ph9p-34f9-6g65 CVE-2026-44705 HIGH published about 2 months ago • updated 13 days ago

### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data ...

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published 12 months ago • updated 14 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): bump the all-monorepo-security group across 3 directories with 20 updates

sentry-demos/empower #1596

0.2.5 → 0.2.7 Patch PR

Closed 5 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 4 updates

Dev-moe-kyawaung/sphinx #14

0.2.5 → 0.2.7 Patch PR

Open 8 days ago 3 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

soapy-dns/retirement-calc #149

0.2.5 → 0.2.7 Patch PR

Open 21 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 22 updates

CaffeeLake/poml #2

0.2.3 → 0.2.7 Patch PR

Open 21 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 14 updates

pdragy/trillium #139

0.2.5 → 0.2.7 Patch PR

Closed 23 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

thec1rclehost123-cmd/thec1rcle #68

0.2.5 → 0.2.7 Patch PR

Open 24 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

nssuwan186-dev/qwen-code #28

0.2.5 → 0.2.7 Patch PR

Closed 30 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 13 updates

lannathompson65-arch/toolkit #3

0.2.5 → 0.2.7 Patch PR

Open 30 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

Connect-Me-Tutoring/connect-me-tutor-portal #666

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 6 directories with 7 updates

Dct555/core-js #6

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

milliorn/portfolio #259

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

Bump the npm_and_yarn group across 2 directories with 16 updates

tabrezahmed51/Cloudflare-agents_0118 #10

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 10 directories with 18 updates

nssuwan186-dev/firebase-tools #79

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 8 updates

hashim2266/mcp.ken #1

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

malektiktokty-cell/Acode #3

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 19 updates

dporkka/budibase #18

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Chore(deps): Bump the npm_and_yarn group across 7 directories with 12 updates

whitphx/stlite #2063

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 33 directories with 12 updates

hashim21223445/angular #331

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 3 comments

build(deps): bump the npm_and_yarn group across 32 directories with 8 updates

hashim21223445/angular #329

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

build(deps): bump the npm_and_yarn group across 28 directories with 12 updates

hashim21223445/angular #327

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

lhy8888/uptime #83

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

BenMakesGames/PoppySeedPets #298

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 5 updates

advanced-security/codeql-sap-js #384

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 8 updates

rudderlabs/rudder-sdk-js #3067

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

Bump the npm_and_yarn group across 2 directories with 2 updates

SimenB/apollo-client #1720

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Chore(deps): Bump the npm_and_yarn group across 8 directories with 12 updates

whitphx/stlite #2062

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

build(deps): bump tmp from 0.2.6 to 0.2.7

Shironex/shiroani #161

0.2.6 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump tmp from 0.2.6 to 0.2.7

Dustin4444/lodestar #92

0.2.6 → 0.2.7 Patch PR

Open about 1 month ago 5 comments

chore(deps): bump the gutenberg-security group across 1 directory with 12 updates

brainstormforce/sureforms-public #105

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /vscode-extension

Dmdv/design-extract #3

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 9 directories with 23 updates

EmilynnJ/dyad #6

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 25 updates

HarleyCoops/gemini-cli #15

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 20 updates

Dev-moe-kyawaung/firebase-tools #8

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 24 updates

cosmiccareer/terminai #23

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 26 updates

EmilynnJ/qwen-code #9

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 4 comments

Bump the npm_and_yarn group across 8 directories with 17 updates

dporkka/budibase #17

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 15 updates

KNOCKSSTUDiOS-labs/firebase-framework-tools #14

0.2.3 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 15 updates

XavierMP14/storybook #43

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

HarleyCoops/chroma #13

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

deps(extension): Bump the npm_and_yarn group across 1 directory with 3 updates

JoshSmithXRM/Power-Platform-Developer-Suite #1248

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 8 updates

sc-sobiyasivakumar/xmcloud-starter-js #279

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 16 updates

dporkka/budibase #16

0.2.3 → 0.2.6 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 3 directories with 13 updates

Takeichi121/CBH-1 #8

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 7 updates

sc-sobiyasivakumar/xmcloud-starter-js #278

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

Chore(deps): Bump the npm_and_yarn group across 7 directories with 12 updates

whitphx/stlite #2059

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 19 updates

Dev-moe-kyawaung/firebase-tools #7

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 24 updates

HarleyCoops/gemini-cli #13

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 21 updates

tabrezahmed51/Cloudflare-agents_0118 #3

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

gidotencate/padlock #17

0.2.5 → 0.2.7 Patch PR

Closed about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 16 updates

Domimueller85/subgraphs #1

0.2.1 → 0.2.7 Patch PR

Closed about 1 month ago 1 comment

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 2 years ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 31,222 (89.9%)

Merged 1,952 (5.6%)

Closed 1,539 (4.4%)

PR Types

Minor 964 (2.8%)

Patch 6,861 (19.8%)

Removal 26,538 (76.4%)