6.4
Medium
CVE-2020-26274 In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability
Description
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| systeminformation 4.31 | earliest → < 4.31.1 | 4.31.1 |
References
- github.com github.com
- github.com github.com
- www.npmjs.com www.npmjs.com
Timeline
- Published
- Last modified
Other CVEs of systeminformation
The 15 CVEs of systeminformation →
CVE-2026-116674
systeminformation is a System and OS information library for node.js
6.5
Medium
CVE-2026-116673
systeminformation is a System and OS information library for node.js
3.3
Low
CVE-2026-116576
systeminformation is a System and OS information library for node.js
7.8
High
CVE-2026-50289
systeminformation is a System and OS information library for node.js
8.7
High