5.9
Medium
CVE-2020-26300 systeminformation is an npm package that provides system and OS information library for node.js
Description
systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| systeminformation 4.26 | earliest → < 4.26.2 | 4.26.2 |
References
- www.npmjs.com www.npmjs.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of systeminformation
The 15 CVEs of systeminformation →
CVE-2026-116674
systeminformation is a System and OS information library for node.js
6.5
Medium
CVE-2026-116673
systeminformation is a System and OS information library for node.js
3.3
Low
CVE-2026-116576
systeminformation is a System and OS information library for node.js
7.8
High
CVE-2026-50289
systeminformation is a System and OS information library for node.js
8.7
High