Skip to content
OpenAdvisories

Package · npm

systeminformation

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-116674

    systeminformation: Prototype pollution in `networkStats()` via the interface name

    systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it with the sanitized calle…

    sebhildebrandt systeminformation systeminformation node-systeminformation Debian Ubuntu npm
  • Medium 5.9
    CVE-2020-26300

    Command injection in systeminformation

    systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.

    sebhildebrandt systeminformation systeminformation npm
  • Medium 6.4
    CVE-2020-26274

    Command Injection Vulnerability in systeminformation

    In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.

    sebhildebrandt systeminformation systeminformation npm