CVE-2026-44705

A flaw was found in the tmp component, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix, or dir options, an attacker can create files...