Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/systeminformation@5.6.4
purl pkg:npm/systeminformation@5.6.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fen5-17u8-efbs OS Command Injection systeminformation is an open source system and OS information library for node.Please upgrade to If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected. CVE-2021-21388
GHSA-jff2-qjw8-5476

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T17:26:01.529359+00:00 GithubOSV Importer Fixing VCID-fen5-17u8-efbs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-jff2-qjw8-5476/GHSA-jff2-qjw8-5476.json 38.6.0
2026-06-04T16:21:07.534288+00:00 GitLab Importer Fixing VCID-fen5-17u8-efbs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/systeminformation/CVE-2021-21388.yml 38.6.0