Skip to content
OpenAdvisories

Package · Debian

node-systeminformation

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.3

    systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net

    systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in an fs.existsSync() check and to build /sys/class/net/<iface> paths, including the …