8.9
Élevée
CVE-2021-21388 systeminformation is an open source system and OS information library for node.js
Description
systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version >= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| systeminformation 5.6 | premières → < 5.6.4 | 5.6.4 |
Références
- www.npmjs.com www.npmjs.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de systeminformation
Les 15 CVE de systeminformation →
CVE-2026-116674
systeminformation is a System and OS information library for node.js
6.5
Moyenne
CVE-2026-116673
systeminformation is a System and OS information library for node.js
3.3
Faible
CVE-2026-116576
systeminformation is a System and OS information library for node.js
7.8
Élevée
CVE-2026-50289
systeminformation is a System and OS information library for node.js
8.7
Élevée