Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/systeminformation@4.31.1
purl pkg:npm/systeminformation@4.31.1
Next non-vulnerable version 5.6.4
Latest non-vulnerable version 5.31.6
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-fen5-17u8-efbs
Aliases:
CVE-2021-21388
GHSA-jff2-qjw8-5476
OS Command Injection systeminformation is an open source system and OS information library for node.Please upgrade to If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.
5.6.4
Affected by 0 other vulnerabilities.
VCID-us5p-3w2r-13e6
Aliases:
CVE-2021-21315
GHSA-2m8v-572m-ff2v
Command Injection Vulnerability command injection vulnerability
5.3.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-297u-ugtg-bkdd OS Command Injection systeminformation suffers from a command injection vulnerability. CVE-2020-26274
GHSA-m57p-p67h-mq74