`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
34,717 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
33,719 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

GHSA-7c78-jf6q-g5cm CVE-2026-49982 HIGH published about 1 month ago • updated about 10 hours ago

### Summary The `_assertPath` guard added to `tmp@0.2.6` rejects only string values that contain the substring `..`. It is bypassed when `prefix`,...

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

GHSA-ph9p-34f9-6g65 CVE-2026-44705 HIGH published about 2 months ago • updated 14 days ago

### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data ...

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published 12 months ago • updated 14 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs (filtered by: Removal PRs )

RSS Feed Clear filter

Bump tmp and react-scripts in /frontend

juhonkang/casting_agency #5

removed Removal PR

Closed about 1 month ago 1 comment

Bump tmp and @openapitools/openapi-generator-cli

ALI-SULAIMAN-ALI/paypal-rest-api-specifications #4

removed Removal PR

Open about 2 months ago 1 comment

chore(deps): bump tmp and testcafe-hammerhead in /lib/rammerhead

QuiteAFancyEmerald/InvisiProxy #573

removed Removal PR

Closed about 2 months ago 1 comment

chore(deps): bump tmp and @expo/devcert in /src/react-native-app

pactflow/opentelemetry-demo #56

removed Removal PR

Open about 2 months ago 1 comment

Bump tmp and standard in /api

alialobidm/simplex-api #20

removed Removal PR

Open about 2 months ago 1 comment

build(deps): bump tmp and @inquirer/editor in /api-docs

Dustin4444/example-messaging-executor #22

removed Removal PR

Open about 2 months ago 3 comments

Bump tmp and webpack-cli

alialobidm/xmrscan-org #10

removed Removal PR

Open about 2 months ago 1 comment

Bump tmp and @inquirer/editor

Barosz30/SpaceBackend #9

removed Removal PR

Closed about 2 months ago 1 comment

Bump tmp and eslint

Dustin4444/solidity-parser-antlr #11

removed Removal PR

Open about 2 months ago 5 comments

Bump tmp and react-scripts in /UI

sibo-dev/matcha #22

removed Removal PR

Closed about 2 months ago 1 comment

Bump tmp and nuxt in /8-deployment-finished

marttp/NuxtCourseMax #76

removed Removal PR

Closed about 2 months ago 1 comment

Bump tmp and react-scripts in /quarkus/quarkus-gradle-thymelaf-reactjs-example/application/frontend

mageddo/java-examples #111

removed Removal PR

Closed about 2 months ago 1 comment

chore(deps): bump tmp and eslint

jeremydaly/serverless-mysql #186

removed Removal PR

Closed about 2 months ago 1 comment

Bump tmp and react-scripts

auth0-samples/react-redux-embedded-login #6

removed Removal PR

Open about 2 months ago 1 comment

build(deps): bump tmp and eslint in /ui/src/phaser3-rex-plugins/plugins/gameobjects/live2d/framework

adrianwedd/AgentVerse #3

removed Removal PR

Open 2 months ago 1 comment

Bump tmp and ember-source

shama/ember-webpack-resolver #73

removed Removal PR

Closed 2 months ago 1 comment

Bump tmp and inquirer

Antony-Lester/employment-application-tracker #3

removed Removal PR

Open 2 months ago 1 comment

Bump tmp and eslint in /tools/lint/eslint/eslint-plugin-mozilla

timothygwebb/MyPal #4

removed Removal PR

Closed 2 months ago 1 comment

Bump tmp and eslint

spexigeo/react-native-maps #5

removed Removal PR

Open 3 months ago 1 comment

Bump tmp and inquirer

moroseCode/FriendFinder #25

removed Removal PR

Open 3 months ago 2 comments

Bump tmp and inquirer

Baecon/discord-mass-emote-downloader #8

removed Removal PR

Closed 3 months ago 1 comment

chore(deps): bump tmp and @inquirer/editor

vladlenskiy/react-native-tdlib #71

removed Removal PR

Closed 3 months ago 1 comment

Bump tmp and movie-trailer

aftabrehan/netslix #48

removed Removal PR

Open 3 months ago 1 comment

Bump tmp and eslint

shilpisirohi12/NodeJS-Express #25

removed Removal PR

Closed 3 months ago 1 comment

Bump tmp and eslint

clearlydefined/spdx #40

removed Removal PR

Closed 4 months ago 2 comments

chore(deps): bump tmp and inquirer

arbabazmi/learnfyra #41

removed Removal PR

Closed 4 months ago 2 comments

Bump tmp and inquirer

Limoer96/frontend-kit #5

removed Removal PR

Closed 4 months ago 1 comment

Bump tmp and @nestjs/cli in /ts-service

Bolaji5821/aiwork-assessment #5

removed Removal PR

Closed 4 months ago 1 comment

Bump tmp and nuxt

MahmudJion/nuxtjs_data_fetch_async_mounted #87

removed Removal PR

Closed 5 months ago 1 comment

Bump tmp and eslint in /client-raindrop

kansas1295/ERF40-smart-contracts #20

removed Removal PR

Open 5 months ago 1 comment

chore(deps): bump tmp and @changesets/cli

future-architect/eslint-plugin-vue-scoped-css #466

removed Removal PR

Closed 5 months ago 2 comments

Bump tmp and eslint

moni-be/weather-app-main #3

removed Removal PR

Open 5 months ago 1 comment

Bump tmp and standard

ivanruby/mpesa-mz-nodejs-lib #33

removed Removal PR

Closed 5 months ago 1 comment

chore(deps): bump tmp and eslint in /foundation-life

GustavoNoll/advanced-finance-planner #244

removed Removal PR

Closed 5 months ago 2 comments

Bump tmp and @vue/cli-plugin-eslint

Krakaw/github-multiple-issues #58

removed Removal PR

Open 5 months ago 2 comments

chore(deps): bump tmp and @wdio/cli in /test/frontend-integration-test

Tanker187/pipelines #7

removed Removal PR

Open 5 months ago 1 comment

chore(deps): bump tmp and @nestjs/cli in /backend

alex216/ft_transcendence #13

removed Removal PR

Closed 5 months ago 1 comment

Bump tmp and eslint

mijado/ioBroker.lgtv12 #17

removed Removal PR

Closed 5 months ago 1 comment

Bump tmp and react-scripts

illogical/ShortcutDashboardNode #6

removed Removal PR

Closed 5 months ago 1 comment

build(deps): bump tmp and tsdx

LibreTexts/cxone-expert-node #27

removed Removal PR

Closed 5 months ago 3 comments

Bump tmp and eslint

edmundchang/triggerchat #43

removed Removal PR

Closed 6 months ago 1 comment

Bump tmp and @nestjs/cli in /backend

Pac12lives808/dental-bids-mvp #7

removed Removal PR

Open 6 months ago 1 comment

build(deps): bump tmp and inquirer

wpengine/mediapress-starter-theme #6

removed Removal PR

Closed 6 months ago 1 comment

Bump tmp and @aws-amplify/cli-core

non-97/amplify-vue-template #4

removed Removal PR

Closed 6 months ago 1 comment

Bump tmp and @inquirer/editor in /websocket-v2/javascript

foxbit-group/foxbit-api-samples #25

removed Removal PR

Closed 6 months ago 1 comment

Bump tmp and @inquirer/editor in /sanity

Susmita-Dey/portfolio #40

removed Removal PR

Closed 6 months ago 1 comment

chore(deps): bump tmp and inquirer

netlify/hydrogen-template #31

removed Removal PR

Closed 6 months ago 1 comment

Bump tmp and eslint

code-and-brain/oclweb2 #2

removed Removal PR

Closed 6 months ago 1 comment

chore(deps): bump tmp and inquirer

hiterm/bookshelf #142

removed Removal PR

Open 6 months ago 1 comment

Bump tmp and react-scripts

siddharthbhagwan/ebc #104

removed Removal PR

Open 6 months ago 3 comments

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 2 years ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 31,222 (89.9%)

Merged 1,952 (5.6%)

Closed 1,539 (4.4%)

PR Types

Minor 964 (2.8%)

Patch 6,861 (19.8%)

Removal 26,538 (76.4%)