raszi records
3 published records for vendor raszi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2026-49982No exploit | tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/templateraszi · tmp · CWE-20 | High8.2 | — | 0.6% | Jun 11, 2026 |
30Monitor | CVE-2026-44705No exploit | tmp: Path Traversal via unsanitized prefix/postfix enables directory escaperaszi · tmp · CWE-22 | High7.7 | — | 0.4% | Jun 11, 2026 |
21Monitor | CVE-2025-54798No exploit | tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameterraszi · tmp · CWE-59 | Medium5.3 | — | 0.3% | Aug 6, 2025 |
- CVE-2026-4998232Monitor
tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template
HighCVSS 8.2No exploitEPSS 0%raszi · tmpJun 11, 2026
- CVE-2026-4470530Monitor
tmp: Path Traversal via unsanitized prefix/postfix enables directory escape
HighCVSS 7.7No exploitEPSS 0%raszi · tmpJun 11, 2026
- CVE-2025-5479821Monitor
tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter
MediumCVSS 5.3No exploitEPSS 0%raszi · tmpAug 6, 2025