Package · Debian

node-systeminformation

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.8

CVE-2026-116576

systeminformation: Windows command injection in services() through Unicode quotation marks

systeminformation is a System and OS information library for node.js. Prior to 5.33.16, services() in lib/processes.js inserts a caller-supplied service name into a PowerShell Get-CimInstance filter after processing it with sanitizeShellString() in lib/util.j…

sebhildebrandt systeminformation systeminformation node-systeminformation Debian Ubuntu npm

Oct 26, 2026
High 8.7

CVE-2026-50289

systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces() on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces(5) source directive because lib/network.js checkLinuxDCHPInterfaces(…

sebhildebrandt systeminformation systeminformation node-systeminformation Debian Ubuntu npm

Jul 17, 2026