8.9
High
CVE-2021-21388 systeminformation is an open source system and OS information library for node.js
Description
systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version >= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| systeminformation 5.6 | earliest → < 5.6.4 | 5.6.4 |
References
- www.npmjs.com www.npmjs.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of systeminformation
The 15 CVEs of systeminformation →
CVE-2026-116674
systeminformation is a System and OS information library for node.js
6.5
Medium
CVE-2026-116673
systeminformation is a System and OS information library for node.js
3.3
Low
CVE-2026-116576
systeminformation is a System and OS information library for node.js
7.8
High
CVE-2026-50289
systeminformation is a System and OS information library for node.js
8.7
High