Command Injection Vulnerability
Affected range
SEMVER: introduced 0; fixed 5.3.1Fixed versions: 5.3.1
systeminformation
Advanced, lightweight system and OS information library
npm latest 5.33.13 MIT
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
5.33.13
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Critical
14 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-gx6r-qc2v-3p3v critical
systeminformation SSID Command Injection Vulnerability
Affected range
SEMVER: introduced 5.0.0; fixed 5.21.7Fixed versions: 5.21.7
GHSA-5xpp-75jx-m839 high
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Affected range
SEMVER: introduced 0; fixed 5.31.7Fixed versions: 5.31.7
GHSA-hvx9-hwr7-wjj9 high
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
Affected range
SEMVER: introduced 4.17.0; fixed 5.31.6Fixed versions: 5.31.6
GHSA-9c88-49p5-5ggf high
Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path
Affected range
SEMVER: introduced 0; fixed 5.30.8Fixed versions: 5.30.8
GHSA-5vv4-hvf7-2h46 high
Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
Affected range
SEMVER: introduced 0; fixed 5.31.0Fixed versions: 5.31.0
GHSA-wphj-fx3q-84ch high
systeminformation has a Command Injection vulnerability in fsSize() function on Windows
Affected range
SEMVER: introduced 0; fixed 5.27.14Fixed versions: 5.27.14
GHSA-8j36-q8x7-pm6q high
OS Command Injection in systeminformation
Affected range
SEMVER: introduced 0; fixed 4.30.2Fixed versions: 4.30.2
GHSA-4v2w-h9jm-mqjg high
Prototype Pollution in systeminformation
Affected range
SEMVER: introduced 0; fixed 4.30.5Fixed versions: 4.30.5
GHSA-94xh-2fmc-xf5j high
systeminformation command injection vulnerability
Affected range
SEMVER: introduced 0; fixed 4.27.11Fixed versions: 4.27.11
GHSA-jff2-qjw8-5476 high
Command Injection Vulnerability in systeminformation
Affected range
SEMVER: introduced 0; fixed 5.6.4Fixed versions: 5.6.4
GHSA-cvv5-9h9w-qp2m high
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
Affected range
SEMVER: introduced 0; fixed 5.23.7Fixed versions: 5.23.7
GHSA-m57p-p67h-mq74 moderate
Command Injection Vulnerability in systeminformation
Affected range
SEMVER: introduced 0; fixed 4.31.1Fixed versions: 4.31.1
GHSA-fj59-f6c3-3vw4 moderate
Command Injection in systeminformation
Affected range
SEMVER: introduced 0; fixed 4.26.2Fixed versions: 4.26.2