tmp

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

Tmp files readable by other users in sync-exec

tmpl vulnerable to Inefficient Regular Expression Complexity which may lead to resource exhaustion

OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot

Malicious code in babeltmplatp (npm)

OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir()

Malicious code in ptmproc (npm)

Malicious code in @adam_baldwin/tag-tmp (npm)

Malicious code in tmp-npmsnha (npm)