Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/05/27 12:34 a.m.80 views

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data flows into the prefix, postfix, or dir options. By embedding traversal sequences e.g., ../ or path separators in these parameters, attackers can cause file...

8.7CVSS5.7AI score0.00354EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.26 views

PT-2026-43627

Name of the Vulnerable Software and Affected Versions tmp affected versions not specified Description The tmp npm package contains a path traversal issue that allows escaping the intended temporary directory when untrusted data is passed into the prefix, postfix, or dir options. By embedding...

8.7CVSS5.4AI score0.00354EPSS
SaveExploits1References16
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-24486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration...

8.6CVSS6.5AI score0.02228EPSS
SaveExploits5References3
Rows per page
Query Builder