Priority CRITICAL 91KEV
The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.90675 · Published 2021-02-16 · Fixed in 5.3.1 CWE-78
Priority HIGH 73
systeminformation is a System and OS information library for node.js.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02184 · Published 2026-07-17 · Fixed in 5.31.7 CWE-78
Priority HIGH 69
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00145 · Published 2026-10-26 · Partial fix · 5.33.16 CWE-78
Priority HIGH 69
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00915 · Published 2026-05-27 · Fixed in 5.31.6 CWE-78
Priority HIGH 69
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00699 · Published 2024-12-20 · Fixed in 5.23.7 CWE-94
Priority MEDIUM 62
systeminformation is a System and OS information library for node.js.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00287 · Published 2026-10-27 · Partial fix · 5.33.13 CWE-1321
Priority MEDIUM 53
systeminformation is a System Information Library for Node.JS.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02217 · Published 2023-09-21 · Fixed in 5.21.7 CWE-77
Priority MEDIUM 52
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.12989 · Published 2025-12-16 · Fixed in 5.27.14 CWE-78
Priority MEDIUM 48
This affects the package systeminformation before 4.27.11.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06749 · Published 2020-10-26 · Fixed in 4.27.11 CWE-78
Priority MEDIUM 46
systeminformation is an open source system and OS information library for node.js.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01854 · Published 2021-04-29 · Fixed in 5.6.4 CWE-20
Priority MEDIUM 46
npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02229 · Published 2020-11-27 · Fixed in 4.30.5 CWE-471
Priority MEDIUM 45
systeminformation is an npm package that provides system and OS information library for node.js.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01407 · Published 2021-09-09 · Fixed in 4.26.2 CWE-77
Priority MEDIUM 43
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01278 · Published 2026-02-19 · Partial fix · 5.31.0 CWE-78
Priority MEDIUM 43
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02745 · Published 2020-12-16 · Fixed in 4.31.1 CWE-78
Priority MEDIUM 41
systeminformation is a System and OS information library for node.js.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.01371 · Published 2026-02-19 · Partial fix · 5.30.8 CWE-78
Priority LOW 37
This affects the package systeminformation before 4.30.2.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.02422 · Published 2020-11-26 · Fixed in 4.30.2 CWE-78
Priority LOW 15
systeminformation is a System and OS information library for node.js.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00127 · Published 2026-10-27 · Partial fix · 5.33.14 CWE-22
THREATIST.IORead the docs