Description
systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sebhildebrandt | systeminformation | < 4.26.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | systeminformation | < 4.26.2 | 4.26.2 | GHSA-fj59-f6c3-3vw4 |