Search for packages
| purl | pkg:npm/systeminformation@4.33.8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fen5-17u8-efbs
Aliases: CVE-2021-21388 GHSA-jff2-qjw8-5476 |
OS Command Injection systeminformation is an open source system and OS information library for node.Please upgrade to If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected. |
Affected by 0 other vulnerabilities. |
|
VCID-us5p-3w2r-13e6
Aliases: CVE-2021-21315 GHSA-2m8v-572m-ff2v |
Command Injection Vulnerability command injection vulnerability |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:50:19.944634+00:00 | GitLab Importer | Affected by | VCID-fen5-17u8-efbs | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2021-21388.yml | 38.6.0 |
| 2026-06-04T20:45:06.565577+00:00 | GitLab Importer | Affected by | VCID-us5p-3w2r-13e6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2021-21315.yml | 38.6.0 |