CVE-2026-44705

CVE-2026-44705

tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix…

Vulnerability class: Path Traversal (Directory Traversal)

Weakness classification (CWE)

References