node-systeminformation vulnerabilities (Debian)

4 vulnerabilities.

• node-systeminformation Debian systeminformation: Prototype pollution in `networkStats()` via the interface name CVE-2026-116674 Fix available 6.5 MediumOctober 27, 2026
• node-systeminformation Debian systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net CVE-2026-116673 Fix available 3.3 LowOctober 27, 2026
• node-systeminformation Debian systeminformation: Windows command injection in services() through Unicode quotation marks CVE-2026-116576 Fix available 7.8 HighOctober 26, 2026
• node-systeminformation Debian systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux CVE-2026-50289 Fix available 8.7 HighJuly 15, 2026