Systeminformation

12 CVEs across 1 Systeminformation products. Browse Systeminformation vulnerabilities, severities, and proof-of-concept exploits.

Systeminformation products with known CVEs

ProductCVEs
Systeminformation12
Systeminformation CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-50289High8.82026-07-17systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces() on Linux is vulnerable to OS command injection throu…
CVE-2026-26318High8.82026-02-19systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` out…
CVE-2026-26280High8.42026-02-19systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the `wifiNetworks()` fu…
CVE-2025-68154High8.12025-12-16systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable…
CVE-2023-42810Critical9.82023-09-21systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed…
CVE-2020-26300Medium5.92021-09-09systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command…
CVE-2021-21388High8.92021-04-29systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systemi…
CVE-2021-21315High7.12021-02-16The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system an…
CVE-2020-26274Medium6.42020-12-16In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell strin…
CVE-2020-26245High8.12020-11-27npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of sh…
CVE-2020-7778High7.32020-11-26This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS…
CVE-2020-7752High8.82020-10-26This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to o…