8.1
Élevée
CVE-2020-26245 npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection
Description
npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite().
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| systeminformation 4.30 | premières → < 4.30.5 | 4.30.5 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de systeminformation
Les 15 CVE de systeminformation →
CVE-2026-116674
systeminformation is a System and OS information library for node.js
6.5
Moyenne
CVE-2026-116673
systeminformation is a System and OS information library for node.js
3.3
Faible
CVE-2026-116576
systeminformation is a System and OS information library for node.js
7.8
Élevée
CVE-2026-50289
systeminformation is a System and OS information library for node.js
8.7
Élevée