CVE-2020-26274
Fixed upstream EPSS 3%CVSS 6.4
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.
Products: sebhildebrandt systeminformation
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | systeminformation | 4.31.1 |