tmp vulnerabilities and fixes

Recent CVEs affecting tmp, with upgrade or downgrade steps. 2 tracked.

tmp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-06-11. Highest priority: CVE-2026-49982 (score 49/100).

• CVE-2026-49982 HIGH 8.2 DOWNGRADE tmp is a temporary file and directory creator for node.js
• CVE-2026-44705 HIGH 8.2 UPGRADE tmp is a temporary file and directory creator for node.js

FAQ

How do I fix tmp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tmp being exploited right now?

None of the tracked tmp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tmp CVE should I patch first?

CVE-2026-49982 currently ranks highest (49/100): tmp is a temporary file and directory creator for node.js.

← Back to latest CVEs