Browse CVEs

HIGH 8.8 CVE-2026-50289 systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces() on Linux is vulnerable to OS command injec… Systeminformation 5.31.7+ Fix from $1,9502026-07-17 HIGH 8.8 CVE-2026-26318 systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `l… Systeminformation 5.31.0+ Fix from $1,9502026-02-19 HIGH 7.8 CVE-2026-26280 systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetw… Systeminformation 5.30.8+ Fix from $1,9502026-02-19 HIGH 8.1 CVE-2025-68154EPSS 13% systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is v… Systeminformation 5.27.14+ Fix from $1,9502025-12-16 CRITICAL 9.8 CVE-2023-42810 systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem… Systeminformation 5.21.7+ Fix from $2,3002023-09-21 CRITICAL 9.8 CVE-2020-26300 systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is … Systeminformation 4.26.2+ Fix from $2,3002021-09-09 CRITICAL 9.8 CVE-2021-21388 systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions … Systeminformation 5.6.4+ Fix from $2,3002021-04-29 HIGH 8.8 CVE-2020-26274 In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a s… Systeminformation 4.31.1+ Fix from $1,9502020-12-16 CRITICAL 9.8 CVE-2020-26245 npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rew… Systeminformation 4.30.5+ Fix from $2,3002020-11-27 HIGH 7.3 CVE-2020-7778 This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to exe… Systeminformation 4.30.2+ Fix from $1,9502020-11-26 HIGH 8.8 CVE-2020-7752EPSS 6% This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's param… Systeminformation 4.27.11+ Fix from $1,9502020-10-26