[Snyk] Upgrade tmp from 0.2.5 to 0.2.7

[posit-snyk-bot]

Snyk has created this PR to upgrade tmp from 0.2.5 to 0.2.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Directory Traversal SNYK-JS-TMP-16881240	282	Proof of Concept
	Directory Traversal SNYK-JS-TMP-17315641	282	Proof of Concept

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: tmp

• 0.2.7 - 2026-05-27
  

  Tagging the release

• 0.2.6 - 2026-05-26
  

  Release v0.2.6

• 0.2.5 - 2025-08-08
  

  Tagging the release

from tmp GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[posit-snyk-bot]

This is a patch version upgrade for tmp that resolves a security vulnerability.

• Security Fix: This upgrade patches a Directory Traversal vulnerability. Version 0.2.6 provided an incomplete fix, and 0.2.7 fully resolves the issue by improving sanitization of non-string inputs for path construction.

There are no documented breaking API changes. This is a recommended security update.

Source: Snyk Vulnerability Database

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[posit-snyk-bot]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.