OsVault/npm/systeminformation
npm1 critical

systeminformation

13 known vulnerabilities · 1 critical · 5 high

CVE-2026-26280

Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path

Published Feb 18, 2026
CVE-2026-26318

Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation

Published Feb 18, 2026
CVE-2020-7752HIGH

systeminformation command injection vulnerability

Published Oct 27, 2020
CVE-2020-7778HIGH

OS Command Injection in systeminformation

Published Feb 9, 2022
CVE-2021-21388HIGH

Command Injection Vulnerability in systeminformation

Published Apr 6, 2021
CVE-2020-26274MEDIUM

Command Injection Vulnerability in systeminformation

Published Dec 16, 2020
CVE-2020-26245HIGH

Prototype Pollution in systeminformation

Published Nov 27, 2020
GHSA-hvx9-hwr7-wjj9

Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

Published May 13, 2026
CVE-2025-68154

systeminformation has a Command Injection vulnerability in fsSize() function on Windows

Published Dec 16, 2025
CVE-2021-21315HIGH

Command Injection Vulnerability

Published Feb 16, 2021
CVE-2023-42810CRITICAL

systeminformation SSID Command Injection Vulnerability

Published Sep 21, 2023
CVE-2020-26300MEDIUM

Command Injection in systeminformation

Published Oct 27, 2020
MAL-2026-5381

Malicious code in @doaction/systeminformation (npm)

Published Jun 9, 2026
Check your entire dependency tree at onceRun dependency scan →