CVE-2025-54798 @ Npm-tmp-0.0.24 #404
Description
Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2025-54798
Checkmarx Project: cx-boris-goman/AutoPR
Repository URL: https://github.com/cx-boris-goman/AutoPR
Branch: kid
Scan ID: bfaa74de-6358-4edb-a528-1d669bc0863c
tmp is a temporary file and directory creator for node.js. In versions prior to 0.2.4, tmp is vulnerable to an arbitrary temporary file "/" directory write via symbolic link "dir" parameter.
Additional Info
Attack vector: LOCAL
Attack complexity: HIGH
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: 0.2.4