Command Injection Vulnerability in systeminformation (GHSA-m57p-p67h-mq74)
- Severity:
- Medium
Description
command injection vulnerability
Recommendation
Update the systeminformation package to the latest compatible version. Followings are version details:
- Affected version(s): < 4.31.1
- Patched version(s): 4.31.1
References
Related Issues
- @sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params - CVE-2025-32388
- MongoDB Shell may be susceptible to control character injection via pasting - CVE-2025-1692
- Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID) - CVE-2024-56334
- Strapi's field level permissions not being respected in relationship title - CVE-2023-37263
- Tags:
- npm
- systeminformation
Anything's wrong? Let us know Last updated on January 09, 2023