Vendors / sebhildebrandt Records 17 All Threatist records
Exploited (KEV) 1
CVSS critical 4
CVSS high 11
Exploited now sebhildebrandt records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 91KEV
The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.90675 · Published 2021-02-16 · Fixed in 5.3.1 CWE-78
Priority HIGH 73
systeminformation is a System and OS information library for node.js.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02184 · Published 2026-07-17 · Fixed in 5.31.7 CWE-78
Priority MEDIUM 53
systeminformation is a System Information Library for Node.JS.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02217 · Published 2023-09-21 · Fixed in 5.21.7 CWE-77
Priority MEDIUM 52
systeminformation is a System and OS information library for node.js.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.12989 · Published 2025-12-16 · Fixed in 5.27.14 CWE-78
Priority MEDIUM 48
This affects the package systeminformation before 4.27.11.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06749 · Published 2020-10-26 · Fixed in 4.27.11 CWE-78
Priority MEDIUM 46
systeminformation is an open source system and OS information library for node.js.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01854 · Published 2021-04-29 · Fixed in 5.6.4 CWE-20
Priority MEDIUM 46
npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02229 · Published 2020-11-27 · Fixed in 4.30.5 CWE-471
Priority MEDIUM 45
systeminformation is an npm package that provides system and OS information library for node.js.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01407 · Published 2021-09-09 · Fixed in 4.26.2 CWE-77
Priority MEDIUM 43
systeminformation is a System and OS information library for node.js.
CVSS 3.1 HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.01278 · Published 2026-02-19 · Partial fix · 5.31.0 CWE-78
Priority MEDIUM 43
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02745 · Published 2020-12-16 · Fixed in 4.31.1 CWE-78
Priority MEDIUM 41
systeminformation is a System and OS information library for node.js.
CVSS 3.1 HIGH 8.4· Local · No auth · No interaction · EPSS 0.01371 · Published 2026-02-19 · Partial fix · 5.30.8 CWE-78
Priority LOW 37
This affects the package systeminformation before 4.30.2.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.02422 · Published 2020-11-26 · Fixed in 4.30.2 CWE-78
Open these records in search → All records by CVSS severity
4 11 1 1 0
THREATIST.IORead the docs