systeminformation vulnerabilities (npm)

17 vulnerabilities.

• systeminformation npm systeminformation: Prototype pollution in `networkStats()` via the interface name CVE-2026-116674 Fix available 6.5 MediumOctober 27, 2026
• systeminformation npm systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net CVE-2026-116673 Fix available 3.3 LowOctober 27, 2026
• systeminformation npm systeminformation: Windows command injection in services() through Unicode quotation marks CVE-2026-116576 Fix available 7.8 HighOctober 26, 2026
• systeminformation npm systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux CVE-2026-50289 Fix available 8.7 HighJuly 15, 2026
• systeminformation npm systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name CVE-2026-44724 Fix available 7.8 HighMay 13, 2026
• systeminformation npm systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` CVE-2026-26318 Fix available 8.8 HighFebruary 18, 2026
• systeminformation npm Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path CVE-2026-26280 Fix available 8.4 HighFebruary 18, 2026
• systeminformation npm Command Injection in fsSize() on Windows CVE-2025-68154 Fix available EPSS 13.0% 8.1 HighDecember 16, 2025
• systeminformation npm Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation CVE-2024-56334 Fix available 7.8 HighDecember 20, 2024
• systeminformation npm systeminformation SSID Command Injection Vulnerability CVE-2023-42810 Fix available 9.8 CriticalSeptember 21, 2023
• systeminformation npm Command Injection Vulnerability in systeminformation CVE-2021-21388 Fix available 8.9 HighApril 6, 2021
• systeminformation npm Command Injection Vulnerability CVE-2021-21315 In KEVPublic exploitFix available EPSS 90.7% 7.1 HighFebruary 16, 2021
• systeminformation npm Command Injection Vulnerability in systeminformation CVE-2020-26274 Fix available 6.4 MediumDecember 16, 2020
• systeminformation npm Prototype Pollution leading to Command Injection in systeminformation CVE-2020-26245 Fix available 8.1 HighNovember 27, 2020
• systeminformation npm Prototype Pollution CVE-2020-7778 Fix available 7.3 HighNovember 26, 2020
• systeminformation npm Command injection in systeminformation CVE-2020-26300 Fix available 5.9 MediumOctober 27, 2020
• systeminformation npm Command Injection CVE-2020-7752 Fix available 8.8 HighOctober 26, 2020