Systeminformation - vulnerabilities (CVEs)

12 CVEs in 1 products, 0 in the last 30 days, newest from 2026-07-17.

Products

• Systeminformation - 12 CVEs

Newest CVEs of Systeminformation

• CVE-2026-50289 - CVSS 8.8 (high), 2026-07-17: systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces() on Linux is vulnerable to OS command injection…
• CVE-2026-26318 - CVSS 8.8 (high), 2026-02-19: systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate`…
• CVE-2026-26280 - CVSS 8.4 (high), 2026-02-19: systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()`…
• CVE-2025-68154 - CVSS 8.1 (high), 2025-12-16: systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable…
• CVE-2023-42810 - CVSS 9.8 (critical), 2023-09-21: systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was…
• CVE-2020-26300 - CVSS 9.8 (critical), 2021-09-09: systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command…
• CVE-2021-21388 - CVSS 9.8 (critical), 2021-04-29: systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of…
• CVE-2021-21315 - CVSS 7.8 (high), 2021-02-16: The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system…
• CVE-2020-26274 - CVSS 8.8 (high), 2020-12-16: In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell…
• CVE-2020-26245 - CVSS 9.8 (critical), 2020-11-27: npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of…
• CVE-2020-7778 - CVSS 7.3 (high), 2020-11-26: This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS…
• CVE-2020-7752 - CVSS 8.8 (high), 2020-10-26: This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to…