Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/systeminformation@5.0.0
purl pkg:npm/systeminformation@5.0.0
Next non-vulnerable version 5.6.4
Latest non-vulnerable version 5.31.6
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-3vuy-w9kw-7fdy
Aliases:
CVE-2023-42810
GHSA-gx6r-qc2v-3p3v
systeminformation SSID Command Injection Vulnerability ### Impact SSID Command Injection Vulnerability ### Patches Problem was fixed with a parameter check. Please upgrade to version >= 5.21.7, Version 4 was not affected ### Workarounds If you cannot upgrade, be sure to check or sanitize parameter strings that are passed to wifiConnections(), wifiNetworks() (string only) ### References See also https://systeminformation.io/security.html
5.21.7
Affected by 0 other vulnerabilities.
VCID-fen5-17u8-efbs
Aliases:
CVE-2021-21388
GHSA-jff2-qjw8-5476
OS Command Injection systeminformation is an open source system and OS information library for node.Please upgrade to If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.
5.6.4
Affected by 0 other vulnerabilities.
VCID-us5p-3w2r-13e6
Aliases:
CVE-2021-21315
GHSA-2m8v-572m-ff2v
Command Injection Vulnerability command injection vulnerability
5.3.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:50:19.993201+00:00 GitLab Importer Affected by VCID-fen5-17u8-efbs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2021-21388.yml 38.6.0
2026-06-04T20:45:06.640463+00:00 GitLab Importer Affected by VCID-us5p-3w2r-13e6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2021-21315.yml 38.6.0
2026-06-02T04:45:51.391418+00:00 GitLab Importer Affected by VCID-3vuy-w9kw-7fdy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2023-42810.yml 38.6.0