Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
When standard temporary directory validations fail, this code falls back to an alternative temporary directory without checking execution privileges. This may lead to local privilege escalation if the directory is accessible to lower privileged users and the application is running as SYSTEM.
Writing to a hardcoded or predictable path in a world-writable directory (like /tmp/) can lead to local privilege escalation or file corruption via symlink attacks (CWE-379). Use the built-in `tempfile` module (e.g., `tempfile.NamedTemporaryFile` or `tempfile.mkstemp`) to create temporary files securely.
