Skip to content

CVE-2026-49982 tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template#1047

Merged
vharseko merged 1 commit into
masterfrom
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/tmp-0.2.7
Jun 15, 2026
Merged

CVE-2026-49982 tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template#1047
vharseko merged 1 commit into
masterfrom
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/tmp-0.2.7

Commits

Commits on Jun 15, 2026