Low severity2.5NVD Advisory· Published Aug 7, 2025· Updated Jun 17, 2026

CVE-2025-54798

Description

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tmpnpm	< 0.2.4	0.2.4

Affected products

108

osv-coords107 versions
pkg:apk/chainguard/arangodb-3.11 pkg:apk/chainguard/drupal-11.3 pkg:apk/chainguard/homepage pkg:apk/chainguard/kibana-9.1 pkg:apk/chainguard/kibana-9.1-bitnami pkg:apk/chainguard/kibana-9.1-iamguarded pkg:apk/chainguard/kubeflow-centraldashboard pkg:apk/chainguard/lerna pkg:apk/chainguard/opensearch-dashboards-2 pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-compat pkg:apk/chainguard/opensearch-dashboards-2-config pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations pkg:apk/chainguard/opensearch-dashboards-2-fips pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-fips-config pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-dashboards-notifications pkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notifications pkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-plugin pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin pkg:apk/chainguard/prism pkg:apk/chainguard/py3.10-jupyterlab pkg:apk/chainguard/py3.11-jupyterlab pkg:apk/chainguard/py3.12-jupyterlab pkg:apk/chainguard/py3.13-jupyterlab pkg:apk/chainguard/saf pkg:apk/chainguard/vitess-19 pkg:apk/chainguard/vitess-19-binaries pkg:apk/chainguard/vitess-20 pkg:apk/chainguard/vitess-20-binaries pkg:apk/chainguard/vitess-20-compat pkg:apk/chainguard/vitess-21 pkg:apk/chainguard/vitess-21-binaries pkg:apk/chainguard/vitess-21-compat pkg:apk/chainguard/vitess-22 pkg:apk/chainguard/vitess-22-binaries pkg:apk/chainguard/vitess-22-compat pkg:apk/wolfi/kubeflow-centraldashboard pkg:apk/wolfi/lerna pkg:apk/wolfi/opensearch-dashboards-2 pkg:apk/wolfi/opensearch-dashboards-2-alerting-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-2-anomaly-detection-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-2-compat pkg:apk/wolfi/opensearch-dashboards-2-config pkg:apk/wolfi/opensearch-dashboards-2-dashboards-maps pkg:apk/wolfi/opensearch-dashboards-2-dashboards-notifications pkg:apk/wolfi/opensearch-dashboards-2-dashboards-observability pkg:apk/wolfi/opensearch-dashboards-2-dashboards-query-workbench pkg:apk/wolfi/opensearch-dashboards-2-dashboards-reporting pkg:apk/wolfi/opensearch-dashboards-2-dashboards-search-relevance pkg:apk/wolfi/opensearch-dashboards-2-dashboards-visualizations pkg:apk/wolfi/opensearch-dashboards-2-index-management-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-2-ml-commons-dashboards pkg:apk/wolfi/opensearch-dashboards-2-security-analytics-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-2-security-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-3-dashboards-notifications pkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-plugin pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin pkg:apk/wolfi/prism pkg:apk/wolfi/py3.10-jupyterlab pkg:apk/wolfi/py3.11-jupyterlab pkg:apk/wolfi/py3.12-jupyterlab pkg:apk/wolfi/py3.13-jupyterlab pkg:apk/wolfi/saf pkg:apk/wolfi/vitess-20 pkg:apk/wolfi/vitess-20-binaries pkg:apk/wolfi/vitess-20-compat pkg:apk/wolfi/vitess-21 pkg:apk/wolfi/vitess-21-binaries pkg:apk/wolfi/vitess-21-compat pkg:apk/wolfi/vitess-22 pkg:apk/wolfi/vitess-22-binaries pkg:apk/wolfi/vitess-22-compat pkg:npm/tmp pkg:rpm/opensuse/python-bqplot&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/python-nbdime&distro=openSUSE%20Tumbleweed
< 3.11.14.4-r3+ 106 more
- (no CPE)range: < 3.11.14.4-r3
- (no CPE)range: < 11.3.13-r3
- (no CPE)range: < 1.13.2-r1
- (no CPE)range: < 9.1.3-r0
- (no CPE)range: < 9.1.3-r0
- (no CPE)range: < 9.1.3-r0
- (no CPE)range: < 1.10.0-r10
- (no CPE)range: < 8.2.4-r1
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r4
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 3.5.0-r0
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.5.0-r0
- (no CPE)range: < 3.5.0-r3
- (no CPE)range: < 3.5.0-r3
- (no CPE)range: < 3.5.0-r3
- (no CPE)range: < 3.4.0-r0
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.4.0-r0
- (no CPE)range: < 5.14.2-r7
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 1.5.1-r0
- (no CPE)range: < 19.0.10-r15
- (no CPE)range: < 19.0.10-r15
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 1.10.0-r10
- (no CPE)range: < 8.2.4-r1
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 2.19.2-r5
- (no CPE)range: < 3.5.0-r0
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.5.0-r5
- (no CPE)range: < 3.4.0-r0
- (no CPE)range: < 5.14.2-r7
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 4.6.1-r1
- (no CPE)range: < 1.5.1-r0
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 20.0.8-r5
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 21.0.5-r6
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 22.0.1-r5
- (no CPE)range: < 0.2.4
- (no CPE)range: < 0.12.45-13.1
- (no CPE)range: < 4.0.2-23.1
Raszi/Node Tmpcpe-rescue
Range: < 0.2.4

Patches

Vulnerability mechanics

References

github.com/raszi/node-tmp/commit/188b25e529496e37adaf1a1d9dccb40019a08b1bnvdPatchWEB
github.com/raszi/node-tmp/issues/207nvdIssue TrackingPatchWEB
github.com/raszi/node-tmp/security/advisories/GHSA-52f5-9888-hmc6nvdExploitVendor AdvisoryWEB
github.com/advisories/GHSA-52f5-9888-hmc6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-54798ghsaADVISORY
lists.debian.org/debian-lts-announce/2025/08/msg00007.htmlnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.163
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000