Description
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sebhildebrandt | systeminformation | < 4.31.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | systeminformation | < 4.31.1 | 4.31.1 | GHSA-m57p-p67h-mq74 |