GHSA-ph9p-34f9-6g65 high
tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
Affected range
SEMVER: introduced 0; fixed 0.2.6Fixed versions: 0.2.6
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
0.2.7
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
High
3 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-7c78-jf6q-g5cm high
tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template
Affected range
SEMVER: introduced 0.2.6; fixed 0.2.7Fixed versions: 0.2.7
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Affected range
SEMVER: introduced 0; fixed 0.2.4Fixed versions: 0.2.4