← العودة للجدول
CVE-2026-49982
CVE-2026-49982 — tmp is a temporary file and directory creator for node.js. In version 0.2.6, the
📅 2026-06-11
🟠 High 🔥 No NVD Exploit Vulnerability CVSS 8.2

📋 الوصف الكامل

tmp is a temporary file and directory creator for node.js. In version 0.2.6, the _assertPath guard added to tmp rejects only string values that contain the substring ... It is bypassed when prefix, postfix, or template is supplied as a non-string value (Array, Buffer, or any object) whose includes('..') returns falsy but whose stringification still contains ../. The value flows through A

💻 الأنظمة المتأثرة

Node.js

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-49982

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v0.2.6

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←