CVE-2020-26300
Fixed upstream EPSS 1%CVSS 5.9
systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.
Products: sebhildebrandt systeminformation
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | systeminformation | 4.26.2 |