Vulnerabilidades de systeminformation (CVE)

Registros CVE publicados para systeminformation, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados
8.1Alta
CVE-2025-68154

Command Injection in fsSize() on Windows

sebhildebrandt systeminformation

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows systems. The optional `drive` parameter is directly concatenated …

13%EPSS
7.1Alta
CVE-2021-21315 KEV

Command Injection Vulnerability

sebhildebrandt systeminformation

The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerabili…

91%EPSS