Vulnerabilities

TI-2026-37031 CVE-2026-50289 · GHSA-5xpp-75jx-m839

systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

HIGH 73

systeminformation is a System and OS information library for node.js.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02184 Published 2026-07-17 Fixed in 5.31.7 CWE-78

TI-2026-21274 CVE-2026-26318 · GHSA-5vv4-hvf7-2h46

systeminformation has Command Injection via Unsanitized `locate` Output in `versions()`

MEDIUM 43

systeminformation is a System and OS information library for node.js.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01278 Published 2026-02-19 Partial fix · 5.31.0 CWE-78

TI-2026-21249 CVE-2026-26280 · GHSA-9c88-49p5-5ggf

Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path

MEDIUM 41

systeminformation is a System and OS information library for node.js.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.01371 Published 2026-02-19 Partial fix · 5.30.8 CWE-78

TI-2025-41734 CVE-2025-68154 · GHSA-wphj-fx3q-84ch

Command Injection in fsSize() on Windows

MEDIUM 52

systeminformation is a System and OS information library for node.js.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12989 Published 2025-12-16 Fixed in 5.27.14 CWE-78

TI-2023-22901 CVE-2023-42810 · GHSA-gx6r-qc2v-3p3v

systeminformation SSID Command Injection Vulnerability

MEDIUM 53

systeminformation is a System Information Library for Node.JS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02217 Published 2023-09-21 Fixed in 5.21.7 CWE-77

TI-2020-16121 CVE-2020-26300 · GHSA-fj59-f6c3-3vw4

Command injection in systeminformation

MEDIUM 45

systeminformation is an npm package that provides system and OS information library for node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2021-09-09 Fixed in 4.26.2 CWE-77

TI-2021-04487 CVE-2021-21388 · GHSA-jff2-qjw8-5476

Command Injection Vulnerability in systeminformation

MEDIUM 46

systeminformation is an open source system and OS information library for node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01854 Published 2021-04-29 Fixed in 5.6.4 CWE-20

TI-2021-04415 CVE-2021-21315 · GHSA-2m8v-572m-ff2v

Command injection in sebhildebrandt systeminformation

CRITICAL 91KEV

The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.90675 Published 2021-02-16 Fixed in 5.3.1 CWE-78

TI-2020-16095 CVE-2020-26274 · GHSA-m57p-p67h-mq74

Command Injection Vulnerability in systeminformation

MEDIUM 43

In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02745 Published 2020-12-16 Fixed in 4.31.1 CWE-78

TI-2020-16066 CVE-2020-26245 · GHSA-4v2w-h9jm-mqjg

Prototype Pollution leading to Command Injection in systeminformation

MEDIUM 46

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02229 Published 2020-11-27 Fixed in 4.30.5 CWE-471

TI-2020-06295 CVE-2020-7778 · GHSA-8j36-q8x7-pm6q

Prototype pollution in systeminformation

LOW 37

This affects the package systeminformation before 4.30.2.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.02422 Published 2020-11-26 Fixed in 4.30.2 CWE-78

TI-2020-06270 CVE-2020-7752 · GHSA-94xh-2fmc-xf5j

Command injection in systeminformation

MEDIUM 48

This affects the package systeminformation before 4.27.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06749 Published 2020-10-26 Fixed in 4.27.11 CWE-78

Vulnerabilities

Filters