The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
[
{
"product": "textproc/isearch package",
"vendor": "textproc/isearch package",
"versions": [
{
"status": "affected",
"version": "before 1.47.01nb1"
}
]
}
]